I am a software engineer specialized in mobile-first technologies
nfdz / cryptool Goto Github PK
View Code? Open in Web Editor NEWCryptography Android application
License: Mozilla Public License 2.0
Cryptography Android application
License: Mozilla Public License 2.0
I am a software engineer specialized in mobile-first technologies
Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
Describe the solution you'd like
A clear and concise description of what you want to happen.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
Additional context
Add any other context or screenshots about the feature request here.
I want to add a search in the list of conversations for any text in the conversation, as well as the key exchange feature to facilitate the work of the application and be the best
I need Chinese
Let it works on web so I can use it on PC
This is a feature that I consider necessary, the possibility to send SMS directly from Cryptool app, yes you can copy and paste messages, but it is not comfortable when you're chatting, so an option to autoencrypt messages at the moment we send them and autodecrypt encrypt messages at the moment we receive them.
2 features more (derivated) but also necessary.
Thanks.
Test Scenarios - Test encryption functionality by entering a password and plaintext, then verifying that the ciphertext is generated correctly.
Test Scenario - Test decryption functionality by entering the correct password and ciphertext, then verifying that the plaintext is recovered accurately.
Test Scenario: - Verify that the widget handles incorrect passwords gracefully, displaying an error message or vibrating red X as specified.
Test Scenario: - Test encryption/decryption with different input lengths and characters to ensure compatibility and accuracy.
Test Scenario: - Verify that encryption/decryption operations work seamlessly in both light and dark themes.
Describe the bug
How to connect two phone ? By sms , by LAN , by file , and by manual options?
To Reproduce
Dont be the dev i guess. Sorry its just for say there is no tutorial to say how to start and i dont really understand where i can post this message.
The app is really good i love it but there is no guide no easy start its sad, and i dont know how to connect 2 phones for communication with the app.
Hope you will understand what I asking for because I know my english is not really good.
When i am using this app in combination with Whatsapp/Signal/Telegram or so, when i am in the app and i copy the encrypted text i can share it with the apps, but when i am in one of those apps and i recieve encrypted text from my contacts i cannot copy and share it with Cryptool. It would be nice to also share it with the tool so it s mich easier to have a conversation.
The second thing that would be nice, is to have a small button that auto generates passwords next to the password tile when making a new encrypted conversation. Most people dont know what a safe password is so thos would be a nice addition in my opinion.
It'd be nice if the app had a dark theme available for people using it at night or for people with dark system themes
Hello,
If I send via SMS, longer messages will not be sent, specifically every message longer than 1 Sms. I Downloaded via Github apk. The sms looks sent in the cryptool app but there is nothing sent in my standard sms application. If i copy and paste the encrypted text to my sms app it is sent, so no error from my sms system.
To Reproduce
Add chat --> connection via sms
Send sms longer than 1 sms (I think 132 chars encrypted text?). The message looks sent in the cryptool app but is not.
Expected behavior
Message gets sent like any other message
It would be really nice if Cryptool supported the usage of PGP keys (both RSA and ECC) for encryption, decryption and signing.
They could be implemented using OpenKeychain.
The salt is predictable, static, and not sufficiently random.
Predictable, static, and non-random IVs cripple the confidentially provided by AES in CBC mode.
The current implementation of AES in CBC mode is vulnerable to padding oracle attacks due to no authentication, or integrity via a MAC.
PBKDF2 with 73 iterations is not enough for key derivation from passwords or passphrases.
SHA1's output of 160 bits is not enough for a 256 bit key. The way PBKDF2 works, leads to issues where adversaries may optimize for a faster verification method if you ask PBKDF2 for more than a hash function will output. See 1Password's implementation flaws.
Use a CPRNG for the salt.
Use a CPRNG for the IV.
Provide authenticity and integrity via HMAC, with SHA256. Encrypt then MAC!
Use 100,000+ iterations for passwords or passphrases. If you are deriving keys from keys, a few iterations is fine.
If you are deriving a single 256 bit key, use SHA256 instead of SHA1 with PBKDF2. If you are deriving two 256 bit keys, use SHA512. Just do not ask PBKDF2 for more bits or bytes than the hash function outputs.
You should take a look at Moxie's blog post on cryptographic doom principle.
Consider using Argon2, or Scrypt in the near future for key derivation instead of PBKDF2. Also consider an AEAD cipher, like ChaCha20-Poly1305.
I have some important messages encrypted by your old app and saved in a note elsewhere for safety. But now with this new version I can't able to decrypt my saved encrypted messages. Can you help me with this? And can you please send me the old cryptool apn? So that I can transition to your new version.
The description says 2mb, but the app has 34.3mb. Incorrect information.
I think we should add an option in the settings to allow screenshots.
Hello, I would like to provide Chinese translation for this project, but I can't open the Crowdin link in the README document.
Test Scenarios :
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.