package icon

Cryptographic ID

Attest the trustworthiness of a device using asymmetric cryptography
New in version 0.4.0
Breaking changes:
In the past, the message (in UTF-16) was "converted" to UTF-8 by truncating the higher byte, but signed and verified correctly. There was only a loss in the message. The personal information was transmitted as UTF-16, but only the lower bytes were signed and verified. This is fixed now. If you only use characters from the UTF-8 set, the new version is still compatible with older versions. If you use charcters from the UTF-16 set, signatures are not compatible with older version
This is an Android App to create and verify identities based on ed25519 signatures. It can also verify prime256v1 signatures to support signatures generated by a tpm2. This can be used to verify devices (e.g. replace tpm2-otp) or people who are in posession of a private key.
The advantage over tpm2-otp is asymmetric cryptography, so you don't need to store and protect the secret on both devices, but have one secret on each device and the public key on multiple devices.

On the first pairing, you need to trust both devices. You create a QR-Code via the share button on device 1, scan it via the "add-friend"-button on device 2. So if you trust device 2 in the future, you can share-and-scan again to verify, that device 1 is really the device you initially trusted in the past.

You can use the same for people you meet over the internet, when you have a secure channel already. One can make a screenshot of the qr-code, sign it and send it to the other party. When you meet in real-life, the other party can proof, that it is really the other party.

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 0.4.0 (10) suggested Added on 2023-03-11

    arm64-v8a armeabi-v7a x86_64

    This version requires Android 5.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.

    Download APK 21 MiB PGP Signature | Build Log

  • Version 0.3.1 (9) - Added on 2023-01-10

    arm64-v8a armeabi-v7a x86_64

    This version requires Android 5.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.

    Download APK 21 MiB PGP Signature | Build Log

  • Version 0.3.0 (8) - Added on 2023-01-08

    arm64-v8a armeabi-v7a x86_64

    This version requires Android 5.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.

    Download APK 21 MiB PGP Signature | Build Log