Bouncy Castle is a fairly well known and respected open source implementation of a bunch of different crypto systems.
I'm a little leery of any of these that require you to sync with their servers, I prefer to keep control over the data. One reason I use KeePassDroid is that it uses a known set of algorithms and file format. I use KeePass 2 on the pc and keep my database on Dropbox, I just export a new copy to the KeePass 1.x format when I make changes and downloaded it to the phone from drop box (DroidBox is a fairly good dropbox client that's rapidly improving).
I'm a little leery of any of these that require you to sync with their servers, I prefer to keep control over the data. One reason I use KeePassDroid is that it uses a known set of algorithms and file format. I use KeePass 2 on the pc and keep my database on Dropbox, I just export a new copy to the KeePass 1.x format when I make changes and downloaded it to the phone from drop box (DroidBox is a fairly good dropbox client that's rapidly improving).
What about security in these apps? How do you decide who is trustworthy, among the vendors/suppliers of wallet apps?
For example, Secforms is the product of a company called Elaxys. Who are they? How do we know they don't have a back door to our data? Secforms has full net access. Their web site is a bare-bones affair. Who are these guys?
B-Folders, for another example, says:
We take the security of your data seriously:
- 256-bit AES encryption - a standard for strong government-grade encryption
- we use a custom database engine to encrypt every bit of your data (the database engine that ships with Android does not allow to encrypt all the data - i.e. indexes, meta-data etc.)
- we use the open-source encryption library Bouncy Castle instead of Android encryption library to provide protection against possible backdoor installed by the operator or device manufacturer
That all sounds good. But, who is Bouncy Castle and why should we trust them?
I'd love to hear from some people who really know about data encryption and security, we must have some here.![]()