Encryption and export compliance
ScanLocker uses the standard encryption that Apple's platform supplies and implements no cryptography of its own. This page states which algorithms the application calls, what each one is for, and how the application is declared for export.
What the encryption is for
Every cryptographic operation in ScanLocker serves one purpose: keeping the owner's own documents and text private on the owner's own iPhone. The application encrypts what you save so that it rests on disk in sealed form, it checks a pin without storing it, and it seals a transfer between two iPhones that you hold in your hands. It contains no digital rights management, no copy protection, and no encryption of communications with any server.
The algorithms and where they come from
Each algorithm below is a published standard, and each is called through a framework that Apple ships inside iOS. The application links no cryptographic library from any other source.
| Algorithm | Used for | Supplied by |
|---|---|---|
| AES-256-GCM | Sealing every saved item at rest, and sealing the payload of a transfer between two iPhones | Apple CryptoKit |
| Curve25519 key agreement | Agreeing a fresh key for each transfer between two iPhones | Apple CryptoKit |
| P-256 key agreement in the Secure Enclave | Wrapping the Locker key so that it opens only on the iPhone that holds it | Apple CryptoKit and the Secure Enclave |
| PBKDF2 | Hashing the Locker Page Pin with a random salt so the pin itself is never stored | Apple CommonCrypto |
| iOS Data Protection | Keeping the sealed files unreadable while the iPhone is locked | iOS |
How the application is declared
- Proprietary cryptography
- None. ScanLocker implements no cipher, no hash, and no key exchange of its own.
- Cryptographic libraries shipped inside the app
- None. Every operation calls a framework that is already part of iOS.
- Encryption of network traffic
- None to the internet. The application opens no internet connection. The one sealed link it makes is a direct local transfer between two iPhones that the owner starts.
- Declaration in the application bundle
- The key
ITSAppUsesNonExemptEncryptionis set tofalse, which records that the application uses only the encryption Apple's operating system supplies. - Distribution
- Apple distributes ScanLocker through the App Store, and the application is available for ordinary purchase without restriction by the developer.
Your obligations as a user
The Terms of Use ask you to observe the export control laws that apply to you, and not to use or transfer the application where those laws prohibit it. Installing the application from the App Store in your own country meets that obligation for almost everyone.
Contact
Write to contact@zirkon.services with a question about this declaration, including a request from a regulator or a customs authority. The Security page describes each of the mechanisms above in engineering terms.