Skip to content

PGPony 3.0.2

Choose a tag to compare

View all tags
@norsehorse-dev norsehorse-dev released this 20 Jun 04:06
v3.0.2
71fba75

Maintenance release for reproducible builds. Disables the Android Gradle Plugin VCS-info file that was embedded in the APK, so the release can be built byte-for-byte from source.

PGPony is an OpenPGP app that runs entirely on device: encrypt, decrypt, sign, verify, manage your keyring, and use a hardware security key over NFC. The full app source is public under Apache-2.0, and the FOSS build ships with no Google services.

Changes in 3.0.2

  • Stopped embedding META-INF/version-control-info.textproto in the APK so F-Droid can reproduce the build from source

Features

  • On-card key generation for hardware security keys (Ed25519 and X25519) over NFC
  • Full smartcard support on YubiKey 5 NFC and Token2: decrypt, sign, encrypt-and-sign, user and admin PIN management, factory reset, for both RSA and 25519 keys
  • RFC 9580 (OpenPGP v6) key generation with Argon2id passphrase protection
  • Read-only Password Store (pass) support, including entries protected by a hardware key
  • Open-source cryptographic core, published separately as PGPonyCore-Kotlin
  • Biometric lock and secure-screen protection
  • Key discovery through WKD and the keys.openpgp.org verifying keyserver

Install

The FOSS APK is attached to this release, signed with the project release key. F-Droid and IzzyOnDroid listings are on the way.

Verify

  • APK SHA-256: 2e17b509189dc1b2cfe3cebaa0c0f154fd7f7b0d1ea54a85ef4e3e7e5c657353
  • Signing certificate SHA-256: 446bf9e621222a40c66cd2476e1a97105ccb2a9b16a01a91c1c7eb90765b50dc

Privacy

No accounts, no ads, no analytics, no tracking. The FOSS build contains no Google services and runs fully on de-Googled devices.

Source: https://github.com/norsehorse-dev/PGPonyAndroid
Crypto core: https://github.com/norsehorse-dev/PGPonyCore-Kotlin

Assets 3
Loading