Crypto Tools (De)Encryption vs AgePony

CryptoTools: Encryption, JWT, Certificates & Forensics for Apple Devices CryptoTools is a privacy-first cryptography and forensic analysis toolkit for Apple devices. Built with SwiftUI, it combines encryption, certificate inspection, ASN.1 parsing, JWT and JWS analysis, JWE support, QR workflows, PKPass tooling, and advanced key utilities in one streamlined app for developers, security professionals, forensic analysts, and technical learners. Designed for transparency and precision, CryptoTools helps you inspect, convert, validate, generate, encrypt, decrypt, and manage sensitive data locally with clear, reproducible results. Features • Encrypt and decrypt data with AES-256-GCM • Generate, import, inspect, and manage cryptographic keys • Parse and analyze ASN.1 structures and certificates • Analyze and verify Apple Sign-In JWTs • Validate and generate JWS in a dedicated UI • Work with JWT, JWS, and JWE flows, including decryption • Use a JWT validator and debugger • Perform SecKey calculations • Generate JWK representations • Export RSA keys to PEM or DER • Manage OpenSSH keys • Generate CSRs • Parse password-protected certificates with OpenSSL • Convert Base64 data quickly and accurately • Share encrypted data through QR codes • Open keys, files, encrypted content, and PKPass workflows via deep links • Access onboarding and in-app technical documentation Built for Real Security Workflows CryptoTools is ideal for testing cryptographic flows, validating signed tokens, inspecting certificates, managing key material, analyzing PKI structures, and sharing protected data across apps and devices. JWT, JWS, JWE & Apple Sign-In Inspect token structure, review claims, verify signatures, generate signed payloads, and decrypt supported JWE content in a dedicated interface. CryptoTools also supports Apple Sign-In JWT analysis and verification using Apple public keys, making authentication debugging faster and clearer. Certificate, ASN.1 & PKI Inspection Explore certificate contents and ASN.1 objects in a readable, structured format designed for debugging, validation, and forensic review. OpenSSL-based parsing also supports password-protected certificate workflows. Key Management & Interoperability Generate, organize, inspect, and transform key material with metadata that supports traceability and repeatable testing. CryptoTools includes JWK generation, RSA export to PEM or DER, OpenSSH key management, CSR generation, and SecKey-based operations for compatibility across common security workflows. QR, Deep Links & PKPass Use QR tools and deep links to move secure or structured data efficiently between systems and apps. PKPass support extends CryptoTools to Wallet-related inspection and testing scenarios. Privacy by Design CryptoTools follows a local-first approach, minimizes unnecessary network activity, and gives users direct visibility into cryptographic operations, certificate inspection, and token analysis. Whether you are validating Apple Sign-In tokens, auditing certificates, generating CSRs, testing JWS or JWE payloads, handling RSA or OpenSSH keys, inspecting PKPass content, or learning applied cryptography, CryptoTools delivers a focused and expert-grade toolkit for Apple platforms. Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

Modern file encryption and signing for iPhone, built on the age protocol. Encrypt anything to anyone, sign files so others can verify they came from you, and keep every byte on your device. No accounts, no servers, no key-management headaches. POST-QUANTUM Hybrid ML-KEM-768 + X25519 recipients, so a file captured today stays private even if X25519 falls to a quantum computer years from now. Interoperable with the age CLI 1.3 and newer. Files already on a classical key? The re-encrypt tool moves them across. ANY SIZE Encrypt, decrypt, sign and verify files of any size. Nothing is held in memory, so a 1 GB video behaves like a text file. ENCRYPT TO ANYONE A GitHub username. AgePony fetches their published SSH keys Any age public key, classical (X25519) or post-quantum A YubiKey, through age-plugin-yubikey recipients (age1yubikey1...) Any SSH public key (ed25519 or RSA) A passphrase, when you don't need recipient keys at all Exchange keys in person without typing: show yours as a QR code, or scan theirs. SIGN FILES Prove a file came from you and hasn't been altered. Sign on its own for a detached signature anyone can check without AgePony, or sign and encrypt in one step so the signature is sealed inside the ciphertext. Signatures verify automatically as a file decrypts. An in-app SSH key (ed25519 or RSA) A Secure Enclave key, generated in hardware and never exportable An external security key over NFC: tap a YubiKey or Token2, including keys behind a FIDO PIN Standard SSHSIG (ssh-keygen -Y sign), verifiable anywhere OpenSSH runs BUILT ON AGE A clean-room implementation of the age v1 format, the modern alternative to PGP: X25519 key agreement, ChaCha20-Poly1305, scrypt for passphrases. Bit-perfect with the reference age CLI. Encrypt on your phone, decrypt on your laptop, and back again. ENCRYPTED NOTES Passphrase-locked notes for secrets that never leave your device: recovery phrases, API keys, credentials. Each note has its own passphrase, stretched through scrypt. Forget it and the body is gone for good. That is the point. LOCK IT DOWN Unlock with Face ID or Touch ID, or set an app password or PIN, with or without biometrics. Choose how long AgePony waits before it locks. An optional duress password looks exactly like a normal unlock but silently wipes the vault, for the moment you are made to open the app. Delete an identity by mistake and Recently Deleted holds it for 30 days. EVERY KIND OF DATA Files: encrypt anything from the Files app Several at once: one archive, or one file each Text: armored age blocks for paste-into-email use Keys: share yours as a QR code, or scan someone else's Inspect: see what any age file is encrypted to, without decrypting it LOCAL-FIRST, ZERO BACKEND No accounts. No cloud. No telemetry. No analytics. No ads. No third-party SDKs. Your vault stays on your device, encrypted at rest with a master key in the iOS Keychain, unlocked by Face ID, Touch ID, or an app password you set. The only network request AgePony ever makes is fetching a GitHub user's public keys, when you ask, and you can route even that through an HTTP proxy. OPEN SOURCE Apache 2.0. Every line at github.com/norsehorse-dev/AgePonyiOS. COMPATIBILITY Any age v1 implementation (FiloSottile/age, str4d/rage, and more) Post-quantum recipients need age CLI 1.3 or newer YubiKey recipients through age-plugin-yubikey SSH-ed25519 and SSH-RSA public keys Binary and PEM-armored age files Detached signatures verify with ssh-keygen -Y verify Requires iPhone with iOS 18.6 or later PRIVACY AgePony collects nothing and there is no server. Your data never leaves your device unless you export it. Policy: agepony.com/privacy. SUPPORT Docs, FAQ, and contact: agepony.com/support. Email: NorseHorse@norsehor.se Built quietly in Alabama by NorseHorse. Sibling to PGPony, the same idea for OpenPGP keys.