Android Privacy Guard

Last updated
Android Privacy Guard
Initial releaseJune 3, 2010 (2010-06-03)
Stable release 1.1.1 (March 24, 2014;6 years ago (2014-03-24) [1] ) [±]
Written in Java [ citation needed ]
Operating system Android (operating system)
License Apache License 2.0p
Website github.com/thialfihar/apg

Android Privacy Guard (APG) is a free and open-source app for the Android operating system that provides strong, user-based encryption which is compatible with the Pretty Good Privacy (PGP) and GNU Privacy Guard (GPG) programs. This allows users to encrypt, decrypt, digitally sign, and verify signatures for text, emails, and other files.

Contents

The application allows the user to store the credentials of other users with whom they interact, and to encrypt files such that only a specified user can decrypt them. In the same manner, if a file is received from another user and its credentials are saved, the receiver can verify the authenticity of that file and decrypt it if necessary.

The specific implementation in APG relies on the Spongy Castle APIs.

APG has not been updated since March 2014 and is no longer under active development. The development has been picked up by OpenKeychain.

Reception

After its initial release in June 2010, [2] it has gained a strong following with over 2000 reviews and over 100,000 installs from the Google Play store. [3] Several tutorials have been written which instruct new users in how to set up APG on an Android phone. [4] [5] These tutorials generally reference APGs interaction with the K-9 Mail Android e-mail client. [6] [7]

OpenKeychain

Between December 2010 and October 2013 no new version of APG was released. [8] In the light of the global surveillance disclosures this lack of development was viewed critically by the community. [9] In September 2013 a fork of APG was released, version 2.1 of OpenKeychain. [10] Some of the new features and improvements were subsequently merged back to APG. However, this process stopped in March 2014, while the OpenKeychain project continued to release new versions. [11] As of February 2016 the development of OpenKeychain is more active than that of APG. [12] Notable features of OpenKeychain include a modern user interface, support for NFC and the YubiKey NEO. [13]

Related Research Articles

Blowfish is a symmetric-key block cipher, designed in 1993 by Bruce Schneier and included in many cipher suites and encryption products. Blowfish provides a good encryption rate in software and no effective cryptanalysis of it has been found to date. However, the Advanced Encryption Standard (AES) now receives more attention, and Schneier recommends Twofish for modern applications.

Pretty Good Privacy (PGP) is an encryption program that provides cryptographic privacy and authentication for data communication. PGP is used for signing, encrypting, and decrypting texts, e-mails, files, directories, and whole disk partitions and to increase the security of e-mail communications. Phil Zimmermann developed PGP in 1991.

GNU Privacy Guard

GNU Privacy Guard is a free-software replacement for Symantec's PGP cryptographic software suite. It is compliant with RFC 4880, the IETF standards-track specification of OpenPGP. Modern versions of PGP are interoperable with GnuPG and other OpenPGP-compliant systems.

Enigmail Extension for Mozilla Thunderbird and SeaMonkey

Enigmail is a data encryption and decryption extension for Mozilla Thunderbird and the Postbox that provides OpenPGP public key e-mail encryption and signing. Enigmail works under Microsoft Windows, Unix-like, and Mac OS X operating systems. Enigmail can operate with other mail clients compatible with PGP/MIME and inline PGP such as: Microsoft Outlook with Gpg4win package installed, Gnome Evolution, KMail, Claws Mail, Gnus, Mutt. Its cryptographic functionality is handled by GNU Privacy Guard.

FileVault

FileVault is a disk encryption program in Mac OS X 10.3 (2003) and later. It performs on-the-fly encryption with volumes on Mac computers.

The Invisible Internet Project (I2P) is an anonymous network layer that allows for censorship resistant, peer to peer communication. Anonymous connections are achieved by encrypting the user's traffic, and sending it through a volunteer-run network of roughly 55,000 computers distributed around the world. Given the high number of possible paths the traffic can transit, a third party watching a full connection is unlikely. The software that implements this layer is called an "I2P router", and a computer running I2P is called an "I2P node". I2P is free and open source, and is published under multiple licenses.

Keychain (software)

Keychain is the password management system in macOS, developed by Apple. It was introduced with Mac OS 8.6, and has been included in all subsequent versions of the operating system, now known as macOS. A Keychain can contain various types of data: passwords, private keys, certificates, and secure notes.

DPAPI is a simple cryptographic application programming interface available as a built-in component in Windows 2000 and later versions of Microsoft Windows operating systems. In theory the Data Protection API can enable symmetric encryption of any kind of data; in practice, its primary use in the Windows operating system is to perform symmetric encryption of asymmetric private keys, using a user or system secret as a significant contribution of entropy. A detailed analysis of DPAPI inner-workings was published in 2011 by Bursztein et al.

This is a technical feature comparison of different disk encryption software.

Norton 360, developed by Symantec, is an “all-in-one” security suite for the consumer market.

Email encryption is encryption of email messages to protect the content from being read by entities other than the intended recipients. Email encryption may also include authentication.

GPG Mail

GPG Mail is an extension for Apple Mail which comes as part of GPG Suite, a software collection that provides easy access to a collection of tools designed to secure your communications and encrypt files. GPG Mail provides public key email encryption and signing. It integrates with the default email client Apple Mail under macOS and the actual cryptographic functionality is handled by GNU Privacy Guard.

Mailpile

Mailpile is a free and open-source email client with the main focus of privacy and usability. It is a webmail client, albeit one run from the user's computer, as a downloaded program launched as a local website.

TextSecure was a free and open-source encrypted messaging application for Android that was first released in May 2010. It was developed by Open Whisper Systems and used end-to-end encryption to secure the transmission of instant messages, group messages, attachments and media messages to other TextSecure users. In November 2015, TextSecure was merged with an encrypted voice calling application called RedPhone and was renamed as Signal.

ProtonMail end-to-end encrypted email service

ProtonMail is an end-to-end encrypted email service founded in 2013 in Geneva, Switzerland by scientists who met at the CERN research facility. ProtonMail uses client-side encryption to protect email content and user data before they are sent to ProtonMail servers, unlike other common email providers such as Gmail and Outlook.com. The service can be accessed through a webmail client, the Tor network, or dedicated iOS and Android apps.

Threema Instant messaging smartphone app

Threema is an end-to-end encrypted instant messaging application for iOS, Android and Windows Phone.

Peerio was a cross-platform end-to-end encrypted application that provided secure messaging, file sharing, and cloud file storage. Peerio was available as an application for iOS, Android, macOS, Windows, and Linux. Peerio (Legacy) was originally released on 14 January 2015, and was replaced by Peerio 2 on 15 June 2017. The app is discontinued.

Enpass

Enpass is a cross-platform password management app to securely store passwords and other credentials in a virtual vault locked with a master password.

OpenKeychain

OpenKeychain is a free and open-source mobile app for the Android operating system that provides strong, user-based encryption which is compatible with the OpenPGP standard. This allows users to encrypt, decrypt, sign, and verify signatures for text, emails, and files. The app allows the user to store the public keys of other users with whom they interact, and to encrypt files such that only a specified user can decrypt them. In the same manner, if a file is received from another user and its public keys are saved, the receiver can verify the authenticity of that file and decrypt it if necessary.

DNS over TLS (DoT) is a security protocol for encrypting and wrapping Domain Name System (DNS) queries and answers via the Transport Layer Security (TLS) protocol. The goal of the method is to increase user privacy and security by preventing eavesdropping and manipulation of DNS data via man-in-the-middle attacks.

References

  1. ↑ "Android Privacy Guard". 2014-03-24. Retrieved 2014-07-22.
  2. ↑ "Release Announcement". Android Privacy Guard. Developer of Android Privacy Guard. 2010-06-03. Archived from the original on 2013-04-16. Retrieved 2015-01-21.
  3. ↑ "APG - Android Apps on Google Play". Android Play Store. 2015-01-21. Retrieved 2015-01-21.
  4. ↑ "Setting up Android Privacy Guard + Bouncy Castle from scratch". I'm Curious. HaoQi Li. 2011-04-13. Retrieved 2015-01-21.
  5. ↑ "Android Privacy Guard (APG) for Android Devices". Security in a Box. Security in a Box Project. 2015-01-21. Archived from the original on 2015-01-21. Retrieved 2015-01-21.
  6. ↑ "K-9 Mail and APG for Android Devices". Security in a Box. Security in a Box Project. 2015-01-21. Archived from the original on 2015-01-21. Retrieved 2015-01-21.
  7. ↑ "How To: Lockdown your mobile e-mail". The Guardian Project. The Guardian Project. 2010-07-09. Retrieved 2015-01-21.
  8. ↑ "APG release history". The APG Project. thialfihar. 2015-03-26. Archived from the original on 2013-04-16. Retrieved 2015-03-26.
  9. ↑ "Filed bug against APG at the PRISM Break project". PRISM Break. Retrieved 2015-03-26.
  10. ↑ "OpenKeychain release history" . Retrieved 26 March 2015.
  11. ↑ "Releases · open-keychain/open-keychain" . Retrieved 22 February 2016.
  12. ↑ "Readme of APG at Github". thialfihar. Retrieved 26 March 2015. APG definitely has some catching up to do. :)
  13. ↑ "About OpenKeychain". Archived from the original on 27 March 2015. Retrieved 26 March 2015.

Software reviews and tutorials

This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.