Secrets

Keep your secrets secret

Replacement to Secure Words and Pictures (which doesn't seem to run correctly on my new Android 6 phone).

Instead of updating the old program to work with Android 6, I've decided to just write a new one because the old App has a difficult-to-fix security issue (because it was designed into the system) where it writes updates to an encrypted file using the same cipher key with different IV. This potentially gives an attacker multiple versions of ciphertext that are all encrypted using the same key and with nearly same content (e.g. if you update your bank account file by adding a new account at the end, the entire file is the same except for the end). This is a security risk given that Android storage uses wear leveling and likely keeps deleted files very long. (If you are on the old App, you can use its clean-the-storage function; it is expensive and will cut the life of your storage.)

Frankly, I don't think anybody is using the old App besides myself; BUT if you are and decide to upgrade to this new App. You need to a PC-based program to help migrate your existing data. Also, the new program does not support pictures so your old pictures will not migrate. I'll keep this PC-based program for a few weeks, so please let me know if you need it by end of this year.