Cryptographic ID
In the past, the message (in UTF-16) was "converted" to UTF-8 by truncating the higher byte, but signed and verified correctly. There was only a loss in the message. The personal information was transmitted as UTF-16, but only the lower bytes were signed and verified. This is fixed now. If you only use characters from the UTF-8 set, the new version is still compatible with older versions. If you use charcters from the UTF-16 set, signatures are not compatible with older version
The advantage over tpm2-otp is asymmetric cryptography, so you don't need to store and protect the secret on both devices, but have one secret on each device and the public key on multiple devices.
On the first pairing, you need to trust both devices. You create a QR-Code via the share button on device 1, scan it via the "add-friend"-button on device 2. So if you trust device 2 in the future, you can share-and-scan again to verify, that device 1 is really the device you initially trusted in the past.
You can use the same for people you meet over the internet, when you have a secure channel already. One can make a screenshot of the qr-code, sign it and send it to the other party. When you meet in real-life, the other party can proof, that it is really the other party.
Versions
Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.
Download F-Droid-
arm64-v8aarmeabi-v7ax86_64This version requires Android 5.0 or newer.
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Download APK 21 MiB PGP Signature | Build Log
-
arm64-v8aarmeabi-v7ax86_64This version requires Android 5.0 or newer.
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Download APK 21 MiB PGP Signature | Build Log
-
arm64-v8aarmeabi-v7ax86_64This version requires Android 5.0 or newer.
It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Download APK 21 MiB PGP Signature | Build Log
