1. Welcome to CryptoGraf Messaging v2.5 CryptoGraf Messaging v2.5 provides the best security to encrypt mobile SMS and MMS.
CryptoGraf Messaging is easy to install, with a simple GUI. CryptoGraf Messaging is based on standard security technologies and methods. Features : - Securely Encrypt SMS and MMS with CryptoGraf Messaging
- Peer to Peer Encryption, without any servers needed - Secure international roaming for mobile users - Text SMS and MMS in any language (supported by phone) - Change SIM cards and still keep communications private - MMS includes text, image, sound and video clips - Easy to use with mobile Messaging App's Inbox, Sent and Other Folders - Prevent snoopers and thieves from reading private messages on your mobile - Prevent wire-tappers and operators from scanning your private messages - Localised menus and dialogs for phones with English, German, Spanish or Thai - Send SMS Invites for your contacts to download and use the Free Version - Free Version (no time limit) for secure communication with 2 contacts - Purchase CryptoGraf Activation Code to communicate with more contacts The Most Secure Crypto (Technical Info): - RSA Crypto Key size 1024 or 2048 bits for Encryption
- AES Crypto Key size 256 bits for Encryption - SHA256 with RSA Digital Signature - X.509 Standard Secure Public Key Digital Certificate (Crypto Contacts) - P2P Secure Public Key Exchange ecurity Mobility Usability : - Randomizer of Crypto Keys uses images from mobile phone gallery
- Exchange Crypto Contacts by bluetooth, sms or mms - Forward Crypto Contacts - Backup or Restore private Crypto Profile - Export or Import X.509 Public Key Digital Certificates Over 50 Mobile Phones Supported! (including Nokia E61) Lenovo P930
2. Using CryptoGraf Messaging v2.5 CryptoGraf uses standard crypto methods to keep your messages secure. Now you can send encrypted sms or mms to your Crypto Contacts . Begin by creating a personal Crypto Profile,exchange Crypto Contacts and then send messages to your Crypto Contacts. The way you receive Crypto Contacts, from other people, determines the Trust level assigned. High trust for Crypto Contacts receive by bluetooth. Medium trust for Crypto Contacts forwarded from High trust Crypto Contacts. Low trust for Crypto Contacts received by sms or mms. Assigning these levels of trust to Crypto Contacts helps to prevent "man-in-the-middle" attacks, where the middle-man can then impersonate and see all the correspondence between both sides. To keep more than two Crypto Contacts, get a CryptoGraf Activation Code . For instructions on getting an activation code go to http://www.CryptoGraf.com (internet and mobile accessible). An activation code will also allow generating the personal Crypto Profile with RSA 2048 bit keys, which is more secure than RSA 1024 bit keys, but will increase the size of messages sent and received. An encrypted and digitally signed sms will be sent with a minimum overhead of 3 sms packets. An encrypted and digitally signed mms will have a minimum overhead of 10KB. All CryptoGraf messages in the sent folder are encrypted and cannot be read using the mobile's Messaging App. All CryptoGraf messages in the drafts folder are also encrypted and cannot be read using the mobile's Messaging App. However, using the Messaging App to edit encrypted messages in the drafts folder can make them corrupted and unusable in CryptoGraf. Recommendations: Check the Logs folder frequently to monitor for any unauthorised use of CryptoGraf Messaging by people who handle your mobile phone. Use a password, in main Options--Settings menu, to protect access to your secret messages and your Crypto Contacts. After starting CryptoGraf Messaging, password will only be needed the first time you try to send or open a message, or access Crypto Contacts folder. Periodically use the Randomizer, in main Options menu, to keep the quality of crypto keys secure the more you send messages. Technical Info: The personal Crypto Profile consists of RSA public key (in X.509 digital certificates) and RSA private key. The RSA private key is never sent when exchanging Crypto Contacts. The RSA private key is always kept on the mobile. A back up (requiring a password) of the RSA private key can be made to another directory on the mobile from where it can be copied to another device. Crypto Contacts are compatible with X.509 digital certificates and contain RSA (1024/2048 bit) public keys. CryptoGraf messages are encrypted and digitally signed using S/MIME standard based methods. Messages are encrypted using AES-256 bit, and digitally signed using RSA (1024/2048 bit) with SHA-256.
3. Quick Start Guide to Using CryptoGraf Messaging When CryptoGraf Messaging is started, a Privacy Statement dialog will inform you that the application uses the phone Contacts database, bluetooth, SMS and MMS to exchange information with other mobiles. This is according to Symbian standard practice to make users aware of the features and functionality used by each application they install. You will then be asked if you don't want to see this information dialog in future. Start by creating personal Crypto Profile 1. Start CryptoGraf Messaging
2. Click on any folder you will automatically be guided to create My Crypto Profile. 3.1. If you want to use the Free Version, select "Yes" - 1024 bits Crypto Key size is used by default 3.1. If you purchased and received a CryptoGraf Activation Code, select "No" - Select message containing your CryptoGraf Activation Code - Select 1024 or 2048 bits Crypto Key size 4. Select an image for the Randomizer of Crypto Keys 5. Enter personal info and expiry date for My Crypto Profile 6. Select own name from phone Contacts database 7. Enter password and confirm to protect the private Crypto Key Send own Crypto Contact to others 1. Select Crypto Contacts folder
2. Select My Crypto Profile 3. Options->Send Crypto Contact - Via bluetooth (recipient will get High Trust Crypto Contact) - Via SMS/MMS (recipient will get Low Trust Crypto Contact) Receive and Save Crypto Contacts 1. Select message containing Crypto Contact received in Inbox
2. Options->Save Crypto Contact 3. Select name from phone Contacts database - Crypto Contacts received by bluetooth are High b Trust - Crypto Contacts received by sms/mms are Low Trust Send Message Keep Secret with all Crypto Contacts ! Note: You can also forward Crypto Contacts on to others.
4. Size of an SMS sent by CryptoGraf Messaging CryptoGraf Messaging will send encrypted and digitally signed sms with a minimum overhead of 3 sms packets.
5. Size of an MMS sent by CryptoGraf Messaging CryptoGraf Messaging will send encrypted and digitally signed mms with a minimum overhead of 10KB. Each MMS can have 1 text section, 1 image and a variable number of sound/video clips attached. The number of attachments is limited to 5 per MMS. See menu Options ->Objects The maximum size of MMS is 100KB. This is due to a limitation set by the mobile device and also the mobile network.
6. Getting and Using CryptoGraf Activation Code When you receive (via SMS or via bluetooth) the Activation Code: Start the CryptoGraf Messaging app - simply click on the message containing the Activation Code. or - choose main menu Options->Register You will then be able to keep more than 2 Crypto Contacts and get more secure message encryption. For instructions on purchasing an Activation Code to get the full features of CryptoGraf Messaging visit http://www.CryptoGraf.com. An Activation Code will also allow generating a personal Crypto Profile with RSA 2048 bits Crypto Key, which is more secure than RSA 1024 bits Crypto key, but will increase the size of messages sent and received. The Activation Code is tied to the phone's serial number (or IMEI) only. To see the mobile phone's serial number (or IMEI) enter: *#06# and dial.
7. Create Personal Crypto Profile Before sending messages and keeping secrets, begin by creating a personal Crypto Profile. When your personal Crypto Contact has been exchanged with other Crypto Contacts, then you can send encrypted messages to other Crypto Contacts. CryptoGraf uses standard crypto methods to keep messages secure. Now you can send encrypted and digitally signed sms or mms to your Crypto Contacts. The first time you use CryptoGraf Messaging, when you click on any menu item, you will automatically be guided through the process to create "My Crypto Profile". - If you want to use the Free Version, select "Yes"
8. Send Own Crypto Contact to others A Crypto Contact can be sent by bluetooth, sms or mms. The method used to send Crypto Contacts impacts the Trust level assigned when it is received. - Select the Crypto Contacts folder (scroll down main folders towards the last folder)
- Select "My Crypto Profile" - Select Options -> Send Crypto Contact - Select Via bluetooth, Via SMS, or Via MMS It is also possible to forward Crypto Contacts received from someone, using the same procedure outlined above. Note: When sending personal Crypto Contact, only the Crypto Contact portion which contains the public key and identity info (Name, Organization, Country, etc.) is sent.
Crypto Contacts received in the Inbox can be saved - Select the message containing Crypto Contact received
- Options->Save - Select contact name from the phone Contacts database to match the Crypto Contact. Note: It is not possible to assign more than one Crypto Contact to the same contact name in phone Contacts database.
10. Invite Contacts to Download and Use CryptoGraf Messaging Each time Free Version users exit the Inbox folder, you will be asked if you want to invite your contacts to use CryptoGraf Messaging. If you click "Yes", you will able to choose the contacts you wish to send the SMS Invite. You can choose multiple contacts to receive the invitation. The SMS Invite contains a message with a link for your contacts to download and use the Free Version. Users who purchased a Activation Code, and used that to enable the full functionality of CryptoGraf Messaging will not be prompted to Invite their contacts to download and use the Free Version. You can still send SMS Invites by clicking on the main menu Options->Invite.
11. CryptoGraf Messaging to Access My folders Open and delete messages stored in My folders.
Move messages from Inbox, Sent and Drafts folders to be stored in My folders. Note: CryptoGraf Messaging cannot access messages stored in subfolders of My folders.
12. CryptoGraf Messaging to Access Drafts folder CryptoGraf stores messages by encrypting them in the drafts folder. Encrypted messages cannot be read using the phone's Messaging App. However, using the Messaging App to edit encrypted messages in the drafts folder can make them corrupted and unusable in CryptoGraf Messaging.
To enable Logs and Password prompt go to main menu Options->Settings Enable log records to keep track use of CryptoGraf Messaing. Logs are a good way to detect unauthorized use CryptoGraf Messaging by people who handle your phone. Enable password prompt for access to messages folders, Crypto Contacts, and Settings. Change password for access to messages folders, Crypto Contacts, and Settings.
14. Trust Level(MY and H, M, L) The trust level assigned to each Crypto Contact is indicated with an icon. H (blue) icon indicates that the Crypto Contact was received via bluetooth.So the Crypto Contact is assigned as High trust since it was received during a personal meeting. M (yellow) icon, for Medium Trust, indicates that the Crypto Contact was received by being forwarded from a High trust Crypto Contact.?The Medium Trust Crypto Contact was received indirectly via an established High Trust Crypto Contact by bluetooth, sms, or mms.A Medium Trust Crypto Contact could also have been initially received as a Low Trust Crypto Contact, and then verified manually. L (grey) icon, for Low Trust, indicates that the Crypto Contact was received via sms or mms. The Low Trust Crypto Contact is considered as such since it was not received during a personal meeting nor forwarded from an established High trust Crypto Contact. A Low Trust Crypto Contact can be turned into a Medium Trust Crypto Contact after it is verified manually by reading and confirming the fingerprint to make sure that the sender and receiver have the same fingerprint. - Select a Low Trust Crypto Contact
15. Crypto Contact Information - Select Crypto Contact or My Crypto Contact
16. Export/Import Crypto Contact Crypto Contacts can be exported or imported from the directory-> installed_drive:\system\data\cgdata as X.509 digital certificates. Imported X.509 digital certificates will always be saved as a Low trust Crypto Contact,
A Low Trust Crypto Contact can be turned into a Medium Trust Crypto Contact after it is verified manually by reading and confirming the fingerprint to make sure that the sender and receiver have the same fingerprint. - Select a Low Trust Crypto Contact
17. Backup/Restore My Crypto Contact It is advisable to make a backup of My Crypto Profile to the file system, so that it can be restored in case of any problems. Since this backup contains your private Crypto Key, you will always have to use a password to protect the backup of My Crypto Profile. The security of this backup depends on the quality of your password. The backup will be saved in the directory ->installed_drive:\system\data\cgdata. To restore a backup of the Crypto Profile, enter the correct password. If the restored Crypto Profile is different from the one in current use, all other Crypto Contacts will be reverted to Low trust. The Crypto Profile is restored from the directory ->installed_drive:\system\data\cgdata\. Caution: The Crypto Profile contains your private key, so it should always be kept private. It is essential to protect the backup of My Crypto Profile with a good password.
18. Re-create Personal Crypto Profile Be careful when you re-create your personal Crypto Profile. All your established Crypto Contacts will revert to Low Trust level. You can still send encrypted and digitally signed sms and mms to other Crypto Contacts but they will be unable to read the message until they receive your current Crypto Contact. You can send your new Crypto Contact to others by bluetooth, sms or mms. - Choose the Crypto Contacts folder (scroll down main folders towards the last folder)
Logs help keep track of CryptoGraf usage. It's also a good way to detect unauthorized CryptoGraf use by people who handle your phone. Logs keep a record of: - Time the Randomizer was used.
- Crypto Profile creation details - Crypto Contact exchange
|
