Arcanum加密工具-兼容VeraCrypt
正式版
1
下载
0
讨论
4
收藏
https://arcanum.zip
photo_library 应用截图
new_releases 更新日志
New
Vault storage usage — The container's Info tab is now a Storage tab with a breakdown donut showing how much space photos, videos, music, other files, and free space each take up. Tap a category to include or exclude it, or press and hold a slice to peek at its size. General and encryption details moved to a Vault details sheet in vault configuration. (#87)
Choose the default vault tab — Vaults now open on the Files tab by default instead of the Gallery, so previews of sensitive photos no longer show on unlock. You can switch the default back to Gallery in Appearance settings. (#85)
Open and edit vault files in other apps — Turn on External app access for a vault (off by default) and, while it's mounted, other apps can open, edit, create and delete its files straight from the system file picker - no export needed. Nothing is decrypted to disk, and access ends the moment the vault is unmounted. (#55)
Share files straight into a vault — Turn on Receive shared files in Security (off by default) and Arcanum appears in the Android share sheet, so you can send files from any app straight into a mounted vault - after unlocking and picking the destination folder. While it's off, Arcanum never shows up as a share target. (#93)
Improvements
Streamlined What's New — The What's New screen now shows the current release up front, with earlier versions tucked behind a Show older versions button for a cleaner view. (#80)
Auto-lock now counts inactivity — Auto-lock triggers after a period of no interaction, not only when the app leaves the foreground - so a vault left open and idle on screen is locked (and unmounted, if set) once the timer runs out. (#60)
Security
Calculator disguise hides PIN lockout — After too many wrong PINs the calculator disguise no longer shows a lockout message - a locked-out attempt now looks exactly like a wrong PIN, so the disguise can't be confirmed. The lockout still applies internally. (#88)
Tamper-proof PIN lockout timing — The PIN lockout can no longer be bypassed by changing the device clock - it uses a monotonic timer with a reboot fallback and stays locked while either clock still says so. (#88)
Stronger offline and import hardening — Removed a leftover network-state permission so the app requests no network access at all, sanitized folder names during import, and fixed a bounds check when mounting a vault. (#88)
Fixes
Grid view previews and in-app open — In the file browser's grid layout, photos and videos now show thumbnails and open inside the app instead of only opening externally - matching the list layout. (#90)
Safer password and keyfile changes — Changing a vault's password or keyfiles now builds and verifies the new header before removing the old one, so an interrupted or failed change can't leave the vault without a valid header. (#88)
Crash confirming with device credential on Android 9-10 — On Android 9 and 10, enabling the diagnostic logger or turning off screenshot protection crashed the app - the authentication prompt asked for a fingerprint-or-PIN combination the OS rejects on those versions. It now falls back to a supported prompt and can no longer crash. (#92)
Stability and data-integrity overhaul — An internal audit resolved 27 concurrency, data-loss, and resilience issues across the vault, gallery, file browser, and photo editor: photo saves in the editor are now atomic (a crash during overwrite can no longer corrupt the file), delete operations only update the database when the native delete actually succeeds, vault mount state is fully thread-safe, and a disk error mid-directory-listing now surfaces as a failure instead of silently appearing as an empty folder. (#94)
No FAT corruption when writing near a hidden volume — When an outer vault was mounted with hidden volume protection enabled, FatFs could allocate a cluster past the hidden boundary, write the FAT chain entry, then fail the data write - leaving the outer volume with a dangling FAT allocation. FatFs's allocator is now capped to the usable outer area and can never place a cluster in the hidden region - while still reading the filesystem exactly as formatted. (#51)
翻译由deepseek提供
新增功能
· 保险库存储使用情况 — 容器的“信息”标签页现改为“存储”标签页,其中的环形分解图会分别显示照片、视频、音乐、其他文件和空闲空间各占多少容量。点按某个类别可将其包含或排除,长按某个扇区可快速查看其大小。通用设置和加密详情已移至保险库配置中的“保险库详情”表单内。(#87)
· 选择默认保险库标签页 — 保险库现在默认打开“文件”标签页而非“图库”标签页,因此解锁后不再显示敏感照片的预览。您可以在“外观”设置中将默认标签页改回“图库”。(#85)
· 在其他应用中打开和编辑保险库文件 — 为保险库开启“外部应用访问”(默认关闭)后,在保险库挂载期间,其他应用可以直接通过系统文件选择器打开、编辑、创建和删除其中的文件——无需导出操作。任何文件都不会解密到磁盘,一旦保险库卸载,访问即终止。(#55)
· 直接将文件共享至保险库 — 在“安全”设置中开启“接收共享文件”(默认关闭)后,Arcanum 会出现在 Android 分享菜单中,您可以从任何应用将文件直接发送到已挂载的保险库中——需先解锁并选择目标文件夹。关闭该功能后,Arcanum 不会显示为分享目标。(#93)
改进
· 精简的“新特性”界面 — “新特性”屏幕现在优先展示当前版本更新内容,旧版本更新记录折叠在“显示旧版本”按钮之后,界面更简洁。(#80)
· 自动锁定现基于无操作时间 — 自动锁定现在会在一定时间内无任何交互操作后触发,而不仅是在应用离开前台时触发——因此,保险库若打开并闲置在屏幕上,计时结束后即会被锁定(若已设置,同时卸载)。(#60)
安全
· 计算器伪装隐藏 PIN 锁定提示 — 多次输入错误 PIN 后,计算器伪装界面不再显示锁定提示信息——锁定后的尝试看起来与普通错误 PIN 完全一致,因此伪装无法被识破。锁定状态仍在内部生效。(#88)
· 防篡改的 PIN 锁定计时 — PIN 锁定无法再通过修改设备时钟来绕过——系统使用单调计时器,并配有重启回退机制,在任一计时器判定锁定期间,保险库始终保持锁定状态。(#88)
· 更强的离线与导入加固 — 移除了遗留的网络状态权限,使应用完全不请求任何网络访问;导入时对文件夹名称进行净化处理;修复了挂载保险库时的边界检查问题。(#88)
修复
· 网格视图预览及应用内打开 — 在文件浏览器的网格布局中,照片和视频现在会显示缩略图,并可在应用内直接打开——与列表布局行为一致。(#90)
· 更安全的密码和密钥文件更改 — 更改保险库密码或密钥文件时,系统会先构建并验证新头部,再移除旧头部,因此中断或失败的更改操作不会导致保险库丢失有效头部。(#88)
· Android 9-10 上使用设备凭证确认时崩溃 — 在 Android 9 和 10 上,启用诊断日志或关闭截屏保护会导致应用崩溃——原因是身份验证提示要求指纹+PIN 的组合,而这些 Android 版本不支持。现已回退至受支持的提示方式,不再崩溃。(#92)
· 稳定性与数据完整性全面检修 — 一次内部审计修复了保险库、图库、文件浏览器和照片编辑器中 27 个并发、数据丢失和稳定性问题:照片编辑器中的保存操作现为原子化(保存覆盖时崩溃不再损坏文件);删除操作仅在原生删除成功后才更新数据库;保险库挂载状态现已完全线程安全;目录列表过程中发生磁盘错误会正确报告失败,而不是静默显示为空文件夹。(#94)
· 写入接近隐藏卷时不再导致 FAT 损坏 — 当外层保险库启用了隐藏卷保护挂载时,FatFs 可能分配到超出隐藏边界的簇,写入 FAT 链条目后再尝试写入数据时失败——导致外卷留下悬空的 FAT 分配。现已将 FatFs 的分配器限制在可用外卷区域内,绝不会将簇分配到隐藏区域——同时仍能按格式化时的原样读取文件系统。(#51)
description 应用介绍
兼容 VeraCrypt 的加密容器管理器
Arcanum 是一款适用于 Android 的加密容器管理器,可创建并挂载兼容 VeraCrypt 的卷。您的文件受到军用级加密保护,仅您本人能够访问。
主要功能
• 兼容 VeraCrypt —— 容器在桌面端(Windows、macOS、Linux)同样适用
• 支持 AES-256、Twofish、Serpent 及级联加密算法
• 多种哈希算法:SHA-512、SHA-256、Whirlpool、Streebog、BLAKE2s-256
• 隐藏卷,实现合理否认
• 支持密钥文件
• 生物识别解锁(指纹/面部)
隐私与安全
• 伪装模式 — 应用在主屏幕上显示为普通计算器
• 紧急 PIN 码 — 立即清除敏感数据并重置应用
• 应用进入后台时自动锁定
• 采用 Argon2id 密钥派生算法的 PIN 码保护
• 无网络访问、无分析、无遥测
• 所有数据均保存在您的设备上
开源
Arcanum 完全开源。其加密实现基于 VeraCrypt 代码库。您可以自行审查、审计并构建该应用。
这是 F-Droid 版本:包含所有功能,无需付费。