can we switch to a more reliable encryption service? #2216
Unanswered
braindevices
asked this question in
Ideas
Replies: 2 comments 2 replies
-
although password-store has move to pgpainless So I guess the effortless choice here is still openkeychain But if we want less effort in total we may want to invest into pgpainless |
Beta Was this translation helpful? Give feedback.
0 replies
-
Feel free to implement and keep maintaing something else/in addition for Markor.
So far AES256 hasn't been broken to my knowledge. The implementation uses standard java/android cryptography functionalities.
No change since X doesn't mean it's unmaintained, it also can mean it is finished and does the job.
cannot find any security audit about it.
Feel free to pay an audit for that library.
Why not just use the openkeychain? which offer the gpg api for other app.
Being in control of what happens when. not relying on another app with async workflow and wait time for every single file that users have.
|
Beta Was this translation helpful? Give feedback.
2 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
the jpencconverter seems not actively maintained since 2022.
I also cannot find any security audit about it.
Maybe it is better to switch to another encryption lib/service
Why not just use the openkeychain? which offer the gpg api for other app. (The project is stable and actively maintained for bug fix, although it does not add more feature)
I know little about the android development. So I do not know if there is OS level api can be used directly instead of relying on stuff like 3rd part libraries. Even if there is, we probably still want to use an encryption method that allow other OS to easily decrypt the file. gpg has support on almost any platform so I think it is still the best choice.
Beta Was this translation helpful? Give feedback.
All reactions