Forums before death by AOL, social media and spammers... "We can't have nice things"
|    comp.mobile.android    |    Discussion about Android-based devices    |    236,313 messages    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
|    Message 236,286 of 236,313    |
|    Maria Sophia to Stefan Claas    |
|    Re: Testers for Android App MicroCrypt w    |
|    03 Mar 26 08:33:48    |
      From: mariasophia@comprehension.com              Stefan Claas wrote:       >> You're welcome to anything I write here on the topic, where this is in a       >> better README.md format that you can use as a starter to edit.       >       > Thanks a lot, much appreciated! I will of course later give credits       > to you in my GitHub (and Gitlab) repository, with a clickable link,       > from a Newsgrouper URL, so that people can see your name from this       > thread, or if you have a home page I would add this link. I will       > add Arno too.              I'm glad you liked it. I don't need the credits. I don't even know who I am.       I have real peer-reviewed journal articles that give me plenty of credit.              There's another review, more detailed, that I wrote after looking at       your source code for your app, so see that one also (but it's more detailed).        Newsgroups: comp.mobile.android        Subject: Re: Testers for Android App MicroCrypt wanted        Date: Mon, 2 Mar 2026 13:57:31 -0800        Message-ID: <10o514b$i5l$1@nnrp.usenet.blueworldhosting.com>              But I just realized that's not in markdown format so here's the markdown.               # MicroCrypt        A cross platform symmetric encryption tool for Android and desktop        systems. It is designed to provide strong cryptographic protection        while minimizing metadata leakage and avoiding unnecessary complexity.               ## Overview        MicroCrypt encrypts user supplied text using AES 256 GCM with keys        derived from an Argon2id password based key derivation function.        Before encryption, plaintext is padded according to ISO IEC 7816 4        rules and extended to the next 1024 byte boundary. This padding        reduces information leakage about the original plaintext length. All        sensitive data is stored in protected memory using the memguard        library and is securely destroyed after use.               ## Cryptographic Design        MicroCrypt uses authenticated encryption with AES 256 GCM. A unique        128 bit salt and 96 bit nonce are generated for each encryption        operation. The salt is used only for Argon2id key derivation. The        nonce is used by AES GCM. The final encrypted payload is encoded as        base64 and consists of        salt || nonce || ciphertext               ## Key Derivation (Argon2id)        MicroCrypt derives a 256 bit AES key using Argon2id with parameters        aligned with OWASP guidance for interactive password hashing. The        implementation uses these constants        * Time cost: 3 iterations        * Memory cost: 64 MiB (64 * 1024 KiB)        * Parallelism: 4 lanes        * Output key length: 32 bytes (256 bits)        These parameters are used for both encryption and decryption. The        derived key is zeroed immediately after use.               ## Padding Scheme        Before encryption, plaintext is padded to the next 1024 byte boundary.        Padding begins with a single 0x80 byte followed by zero bytes as        needed. This matches ISO IEC 7816 4 padding semantics and prevents the        ciphertext length from revealing the original plaintext size. During        decryption, padding is removed by scanning backward for the 0x80        marker.               ## Password Requirements        MicroCrypt enforces a minimum password length of 12 characters.        Passwords are held only in protected memory and are destroyed        immediately after key derivation.               ## Security Features        * AES 256 GCM authenticated encryption        * Argon2id password based key derivation        * ISO IEC 7816 4 padding to 1024 byte boundaries        * memguard protected memory for sensitive data        * Automatic clearing of sensitive text after inactivity        * Clipboard auto clear after 15 seconds        * Rate limiting on decryption attempts        * Secure destruction of keys, buffers, and passphrases               ## Platform Support        MicroCrypt is implemented in Go and uses the Fyne GUI toolkit.        MicroCrypt runs on        * Linux        * macOS        * Windows        * Android (author may want to say which SDK)        The desktop and mobile versions share the same cryptographic logic and        Argon2id parameters.               ## Installation        Option 1: Install using the Fyne toolchain        go install fyne.io/tools/cmd/fyne@latest        fyne install github.com/Ch1ffr3punk/MicroCrypt/MicroCrypt Desktop@latest               Option 2: Clone the Git repository        git clone https://github.com/Ch1ffr3punk/MicroCrypt               ## Usage Notes        MicroCrypt is intended for personal symmetric encryption workflows        where ease of use, portability, and strong cryptographic defaults are        desired. It is not designed for public key encryption, multi user key        management, or automated scripting pipelines. The tool focuses on        minimizing metadata leakage and providing authenticated encryption        without exposing implementation details to the user.               ## Planned Changes        * Increase minimum password length to 15 characters        * Increase idle timeout from 1 minute to 5 minutes               ## Donations        Users who wish to support development may contribute using these        addresses        * BTC: bc1qkluy2kj8ay64jjsk0wrfynp8gvjwet9926rdel        * Nym: n1f0r6zzu5hgh4rprk2v2gqcyr0f5fr84zv69d3x        * XMR: 45TJx8ZHngM4GuNfYxRw7R7vRyFgfMVp862JqycMrPmyfTfJAYcQGE       T27wL1z5RG1b5XfRPJk97KeZr1svK8qES2z1uZrS               ## License        MicroCrypt is distributed under the Apache 2.0 license.               ## Project Links        GitHub repository        https://github.com/Ch1ffr3punk/MicroCrypt        Fyne application listing        https://apps.fyne.io/apps/oc2mx.net.microcrypt.html       --       I strive to make every post on Usenet add value that wasn't there before.              --- SoupGate-Win32 v1.05        * Origin: you cannot sedate... all the things you hate (1:229/2)    |
[   << oldest   |   < older   |   list   |   newer >   |   newest >>   ]
(c) 1994, bbs@darkrealms.ca