introducing sub rosa

Hi guys, I would like to introduce my app, sub rosa.
sub rosa is an open-source Android app designed to make managing and provisioning your hardware security keys effortless.
sub rosa provides seamless OpenPGP key provisioning and management. The Librem Key is a powerful digital identity device, but managing OpenPGP applets can sometimes feel cumbersome. sub rosa brings robust OpenPGP management right to your Android device. It features zero-friction imports from OpenKeychain and PGPony via “share backup”.
With sub rosa, you can provision OpenPGP keys onto your hardware key to encrypt, decrypt, cryptographically sign documents, or authenticate securely via SSH—all with your mobile phone.
This enables compartmentalizing your digital personas. You can sign a document with one OpenPGP key, then program a different key to decrypt a message from a business partner, and then program another key to digitally sign a whistleblower document sent to a media organization.
Designed to be effortlessly simple, sub rosa gives you full control over your cryptographic keys without clutter or complexity. It has its roots in the open-source YubiKit library.

You can find it in the Google Play Store: https://play.google.com/store/apps/details?id=acab.naiveha.subrosa.by.naiveha and the source code on GitHub: GitHub - naive-HA/subrosa: Program the static password and/or OpenPGP keys to your hardware security key (YubiKey, Nitrokey 3, Nitrokey Pro, Librem Key) · GitHub .

The app features a reproducible build, so what you see is what you get!
I’d love to hear your feedback, feature requests, or thoughts, especially from fellow Librem Key users! Let me know what you think.

Is there an aarch64 linux app (dep) or a flatpak version for that platform?

Those are dirty words here.

Right. Put it on f-droid.

[Edit: It looks like it used to be on f-droid? It is on a different f-droid like repository (IzzySoft). Someone recently asked to put it (back?) sub rosa (#3512) · Issues · F-Droid / Requests For Packaging · GitLab … but there is some unknown auto-build problems?]

:)))))))))))))))))))))))) that’s the best you can do? README and commit messages?

Goo in the history of README commit and see how this started: with something similar to what is display by IzzyOnDroid as description. Then, when the app was published in google play, colleagues at work asked for an elevator pitch… too lazy to read the README. So, I wrote them an email trying to explain what the app does and why might be of interest to them. And that email is basically the today’s README. If there is anything un-natural there it might be because I am not a native English speaker

And the commit messages: that is just me - lazy :))))))))))))))

Dig deeper

dirty words indeed. I subscribe. but what can you do? google is slowly but certainly killing independent app stores… anyway, the app is available there, but if you read the github README, also on IzzyOnDroid, and more importantly I would say, the source code is available on github. I would recommend you download and compile yourself. The app is reproducible build so what you see is what you get.

it was on f-droid, but I asked to be taken off. that issue you point to (it is my request, not someone else) was the initial request to add the app to f-droid and then the request to be removed. after sub rosa, I tried publishing another app (UPnP Kino) and the experience made me pull everything off f-droid. Anyway, the app is available in Izzy’s repo, which you can access through f-droid. As per above, better than IzzyOnDroid or f-droid, download the code and compile it yourself

I liked the name Rosa as Sputnik, Aurora or Rus as well.

Thanks you.

not sure what you mean, but I assume is a good thing :slight_smile:

“sub rosa” is a hint to “secrecy”: Sub rosa - Wikipedia