Sigil

about

description

Sigil is an open-source, advanced encryption utility built for defense-in-depth and memory safety. Unlike standard tools that rely on a single algorithm, Sigil employs a multi-layered, configurable architecture to ensure your data remains secure against sophisticated cryptanalysis. The application operates entirely offline, performing all cryptographic operations locally on your device with a modern Material 3 interface that balances high-level security with usability. **Core Security Features** * **Encryption Profiles:** Customize your security posture. Switch between "Standard AES-GCM" (Raw mode) for compatibility with external tools, or the "Sigil Chain" for maximum defense. * **Multi-Layer Cascade:** The default Sigil Chain wraps your data in a hybrid cascade of XChaCha20-Poly1305 + Serpent-CBC + Twofish-CBC + AES-256-GCM. This defense-in-depth approach ensures that even if one algorithm is compromised, your data remains protected by independent layers. * **Zero-Knowledge Auth:** Secure the app with a numeric PIN or a strong alphanumeric Password. Credentials are hashed using Salted Argon2id and never stored in a reversible format. * **Hardware-Backed Vault:** When supported by the device, master keys are generated and stored in the Android Keystore (or StrongBox). Saved encryption passwords never touch the disk in plaintext. * **Memory Hygiene:** Sensitive data buffers are zeroed where possible after use to reduce exposure to memory dumps. **Privacy & System Hardening** * **Screen Security:** Prevents screenshots and hides app content in the "Recent Apps" overview using `FLAG_SECURE`, protecting against visual snooping and malicious screen recorders. * **Clipboard Protection:** Automatic wipe timers and Android 13+ sensitive content flags prevent clipboard managers from retaining your decrypted data. * **Offline-Only:** Sigil does not request the INTERNET permission. It tracks no analytics, collects no telemetry, and stores no data on external servers. **Advanced User Toolkit** * **Secure Keystore:** Save, view, and manage encryption keys using the hardware-backed vault. * **Custom Encryption Control:** Full manual control over encryption chains. Build your own cascade from 18 algorithms, reorder layers, and toggle ZLib compression. * **System Console:** Real-time logging of the encryption process, providing precise timing metrics and error diagnostics. * **Advanced Theming:** Material You Dynamic Colors, Dark/Light modes, and a custom HSV color engine. **Technical Specifications** * **Key Derivation:** Argon2id (Configurable up to 256MB RAM) + SHA-512 pre-hashing. * **Supported Algorithms:** AES-256-GCM, AES-256-CBC, ChaCha20-Poly1305, XChaCha20-Poly1305, ARIA-256-GCM, Twofish, Serpent, Camellia, CAST6, RC6, SM4, GOST, SEED, Blowfish, IDEA, CAST5, TEA, and XTEA. **Open-Source Transparency** The complete source code is available for public audit on GitHub: https://github.com/Animesh-Varma/Sigil For the complete release roadmap and planned features, please visit: https://github.com/Animesh-Varma/Sigil/releases For any queries, please contact: sigil@animeshvarma.dev

publisher

78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d

first seen

2026-10-08T17:48:58.664128+00:00

last event

2026-10-08 17:48 UTC

install

zapstore.dev or any Zapstore-compatible client

source & build

repository

https://github.com/animesh-varma/sigil

arch flags

android-arm64-v8a android-armeabi-v7a android-x86 android-x86_64

manifest

missing

releases (kind 30063)

1 release indexed; latest 0.4.5.

assets & verification

Every app, release and asset event is schnorr-verified (NIP-01 id + signature) before it enters the catalog, and assets are content-addressed by sha256. We subscribe read-only to the catalog relay — never write to it.

0.4.5 — Sigil-v0.4.5-signed.apk

sha256

327afc1dfac360778448ff41bb53b1e0b9feea0fedf50d6fe084ca456487a62c

size

17.2 MB

archs

android-arm64-v8a, android-armeabi-v7a, android-x86, android-x86_64

version code

405

apk cert sha256

46bc64a52bf65abaa1b7ea25526be25edd8c524c9d08ad71cc642a63661890dc

download

Sigil-v0.4.5-signed.apk

Showing the newest 1 asset descriptor; the full set is in /api/apps/78ce6faa…