Pandora's Box

Pandora's Box is a hardware-backed, AES-256-GCM encrypted vault application for Android. It intercepts shared files from any app, encrypts contents directly into isolated app storage using Android KeyStore cryptographic keys, obfuscates file metadata, and enforces unsealing via a 256-bit Master Cryptographic Key.

🔑 Key Features & Security Architecture

1. Hardware-Backed AES-256-GCM Cryptography

•

Android KeyStore Integration: Master encryption key generated in hardware-backed TEE / StrongBox.

•

Chunked Stream Encryption: Uses CipherOutputStream and CipherInputStream with an 8KB memory buffer for fast, memory-safe encryption of large videos, photos, and documents.

•

Per-File IV Generation: Each encrypted file receives a unique, cryptographically random 12-byte Initialization Vector (IV).

•

Metadata & Directory Obfuscation: Encrypted JSON metadata index (metadata.enc) and obfuscated file IDs (.enc) ensure zero plaintext leaks on storage.

2. Mandatory 256-Bit Master Cryptographic Key

CSPRNG Generation: Each installation creates a 100% unique 24-character Master Cryptographic Key (PNDR-XXXX-XXXX-XXXX-XXXX).

•

One-Time Critical Data Loss Warning: Prominently alerts the user about permanent data loss risks if the key is lost.

Mandatory Key Unsealing: Tapping "COPY KEY & SEAL PANDORA'S BOX" copies the key, permanently disables PIN unlock, and enforces 24-character key unsealing (with 1-click clipboard paste support)