CypherAir vs AgePony

CypherAir is a fully offline, open-source OpenPGP encryption tool built for iOS, iPadOS, macOS and VisionOS. It makes zero network connections. There is no telemetry, no tracking, and no possibility of data leakage. Two Encryption Profiles • Universal (Profile A) — Interoperable with GnuPG and all major PGP implementations. RFC 4880 compliant, employing Ed25519 and X25519 with SEIPDv1. • Advanced (Profile B) — Implements the latest OpenPGP standard, RFC 9580, with Ed448 and X448, authenticated encryption via AEAD (SEIPDv2), and Argon2id passphrase protection. Capabilities • Encrypt and decrypt text and files, processed as streams for efficiency • Create digital signatures — cleartext for messages, detached for files • Exchange public keys through QR codes using the system Camera, with no camera permission required • Manage multiple keys, each with its own encryption profile • Safeguard private keys in the Secure Enclave, unlocked only by Face ID or Touch ID Privacy Through Architecture • The sole system permission is the Face ID usage description • Private keys never leave the protection of Secure Enclave wrapping Open Source CypherAir is open source and available under the GNU General Public License v3.0 or later (GPL-3.0-or-later) or the Mozilla Public License 2.0 (MPL-2.0). Additional languages are in progress. Disclaimer No Warranty: You expressly acknowledge and agree that use of the Licensed Application is at your sole risk. To the maximum extent permitted by applicable law, the Licensed Application and any services performed or provided by the Licensed Application are provided "as is" and "as available," with all faults and without warranty of any kind, and Licensor hereby disclaims all warranties and conditions with respect to the Licensed Application and any services, either express, implied, or statutory, including, but not limited to, the implied warranties and/or conditions of merchantability, of satisfactory quality, of fitness for a particular purpose, of accuracy, of quiet enjoyment, and of noninfringement of third-party rights. No oral or written information or advice given by Licensor or its authorized representative shall create a warranty. Should the Licensed Application or services prove defective, you assume the entire cost of all necessary servicing, repair, or correction. Some jurisdictions do not allow the exclusion of implied warranties or limitations on applicable statutory rights of a consumer, so the above exclusion and limitations may not apply to you.

Modern file encryption and signing for iPhone, built on the age protocol. Encrypt anything to anyone, sign files so others can verify they came from you, and keep every byte on your device. No accounts, no servers, no key-management headaches. POST-QUANTUM Hybrid ML-KEM-768 + X25519 recipients, so a file captured today stays private even if X25519 falls to a quantum computer years from now. Interoperable with the age CLI 1.3 and newer. Files already on a classical key? The re-encrypt tool moves them across. ANY SIZE Encrypt, decrypt, sign and verify files of any size. Nothing is held in memory, so a 1 GB video behaves like a text file. ENCRYPT TO ANYONE • Anyone's published SSH keys, fetched by their username • Any age public key, classical (X25519) or post-quantum • Any SSH public key (ed25519 or RSA) • A passphrase, when you don't need recipient keys at all SIGN FILES Prove a file came from you and hasn't been altered. Sign on its own, producing a detached signature anyone can check without AgePony. Or sign and encrypt in one step, sealing the signature inside the file so the ciphertext never reveals who sent it. Signatures are verified automatically as a file decrypts. • Sign with an in-app SSH key (ed25519 or RSA) • Sign with a Secure Enclave key, generated in hardware and never exportable • Sign with an external hardware security key over NFC, including keys protected by a PIN • Standard SSHSIG signatures, verifiable with the usual SSH command-line tools • Verify signatures from other people right inside the app BUILT ON AGE A clean-room implementation of the age v1 file format, a modern, simpler alternative to older encryption tools. X25519 key agreement, ChaCha20-Poly1305 authenticated encryption, scrypt for passphrase-protected files. Bit-perfect with the reference age CLI: encrypt on your phone, decrypt on your laptop, and back again. HARDWARE, PAPER, NEXT PHONE • Secure Enclave decryption keys, quantum-safe if you like • Decrypt with a security key over NFC • Move keys to your next phone over Wi-Fi • Passphrase-protected paper backups ENCRYPTED NOTES Passphrase-locked notes for secrets that never need to leave your device: recovery phrases, API keys, server credentials. Each note has its own passphrase, stretched through scrypt into its wrapping key. Forget it and the body is gone for good. That is the point. EVERY KIND OF DATA • Files: encrypt anything from the Files app • Several at once: one archive, or one encrypted file each, your choice • Text: armored age blocks for paste-into-email use • Inspect: see what any age file is encrypted to, without decrypting it • .age files: tap "Open in AgePony" from the Files app LOCAL-FIRST, ZERO BACKEND No accounts. No cloud sync. No telemetry. No analytics. No advertising. No third-party SDKs. Your vault stays on your device, encrypted at rest with a master key in the iOS Keychain that Face ID or Touch ID unlocks. The only internet request AgePony ever makes is fetching someone's published SSH keys, when you ask. FOR THE DEVELOPER SECURITY COMMUNITY If you have ever wished file encryption were simpler, age is the answer and AgePony is age on your phone. Sending someone an encrypted file without coordinating keys first takes one tap and their username. The interface is deliberately minimal: files, notes, text, identities, settings. OPEN SOURCE Apache 2.0. Source code linked from agepony.com. COMPATIBILITY • Any age v1 implementation, including the reference command-line tool • Post-quantum recipients need age CLI 1.3 or newer • Reads and writes both binary and PEM-armored age files • Requires iPhone with iOS 17.0 or later PRIVACY AgePony collects nothing and there is no server. Your data never leaves your device unless you export it. Policy: agepony.com/privacy. SUPPORT Documentation, FAQ, and contact: agepony.com/support Email: NorseHorse@norsehor.se Built quietly in Alabama by NorseHorse. Sibling to PGPony, the same idea for OpenPGP keys.