crypTonight
context aware mobile privacy tool
Do you like the fact that:
- governments, telecoms and site admins can read your messages anytime they want?
- everytime you let somebody use phone, your private data is in danger?
- after being stolen, your phone is great source of information about you which helps to stole even more your data?
- good passwords are long and/or hard to remember?
- attack on websites you store information on leads to exposure of your confidential data?
Well, if you answer yes, you can leave this site, because it's not for you.
Otherwise, you should be interested in crypTonight.
#define crypTonight
This is still early development version, beware!
This software is a Proof of Concept for "Using context information for password reinforcement in mobile environment" (coming soon) paper by Radosław Nielek and Łukasz Anwajler (Polish-Japanese Institute of Technology).
Code will be published soon. Download APK (please mail me, if you used it sucessfully - device name and Android OS version would be helpful).
crypTonight is context-aware privacy tool for Google Android platform. What does it mean? 'Context-aware' means that it uses environment you are in to help you and do its stuff better. By privacy I mean encryption.
What crypTonight can do:
- encrypt/decrypt sms messages
- send sms
- encrypt/decrypt any given text
What's so special? It uses traditional password and contexts to build key, then encrypts messages using 128 bit AES.
National Security Agency states:
The design and strength of all key lengths of the AES algorithm (i.e., 128, 192 and 256) are sufficient to protect classified information up to the SECRET level. TOP SECRET information will require use of either the 192 or 256 key lengths.
Contexts used to build key are:
- password (required)
- geolocation (optional)
- gyroscope (optional)
- light sensor (optional)
- battery state (optional)
What I want crypTonight to do in future:
- profile management for less secure and more convenient (a.k.a everyday) use
- use own implementation of AES?
- more complex use of contexts?
- Gmail, Facebook integration?
- encrypting calls?
- ...you tell me :)
What crypTonight doesn't do and will not:
- unfortunately, it won't make coffee, sorry :(
crypTonight in action
Screenshots and pictures.
Launching crypTonight.
Main menu.
Creating encrypted message.
Adding text password.
Green tick indicates that text password is enabled.
Adding location context.
Presenting GPS data.
Geolocation added to the key.
Gyroscope - preparing.
Gyroscope - capturing gestures.
Gyroscope gestures.
Light sensor.
Battery state.
We're using only text password, geolocation and random order.
Encrypted message. You are able to send it via SMS as well...
...or you can just copy it.
Back to main menu.
Decrypting messages.
Custom message decrypting - pasting from clipboard.
We need to enable proper contexts.
After filling data - we have the result.
Instead of copy&paste, we can just read our SMS Inbox...
... and the rest is obvious.
FAQ
Why is it Android-only?
I don't have other device (as for now).
Why it doesn't work on my device?
I couldn't test it on every device - because I don't own every model. Send me an e-mail and I will try to find it and fix possible bugs.
Tested on:
- Samsung Galaxy S
- HTC Desire
Contact
Who is to blame?
Code by Łukasz Anwajler. Contact me: lukasz(a)anwajler.com, @anwajler on Twitter.
Based on paper by Radosław Nielek and Łukasz Anwajler.