PUBLICATIONS

 Quick Start Guide

 CryptoGraf Manual

 Product Description

 Tech Description

 FAQ on Crypto


 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

1. Welcome to CryptoGraf Messaging v2.5
2. Using CryptoGraf Messaging v2.5
3. Quick Start Guide to Using CryptoGraf Messaging
4. Size of an SMS sent by CryptoGraf Messaging
5. Size of an MMS sent by CryptoGraf Messaging
6. Getting and Using CryptoGraf Activation Code
7. Create Personal Crypto Profile
8. Send Own Crypto Contact to others
9. Saving Crypto Contact
10. Invite Contacts to Download and Use CryptoGraf Messaging
11. CryptoGraf Messaging to Access My folders
12. CryptoGraf Messaging to Access Drafts folder
13. CryptoGraf Settings
14. Trust Level (MY and H, M, L)
15. Crypto Contact Information
16. Export/Import Crypto Contact
17. Backup/Restore My Crypto Contact
18. Re-create Personal Crypto Profile
19. Logs folder

 

 

 

 

 

 

 

 

1. Welcome to CryptoGraf Messaging v2.5

CryptoGraf Messaging v2.5 provides the best security to encrypt mobile SMS and MMS.
CryptoGraf Messaging is easy to install, with a simple GUI.
CryptoGraf Messaging is based on standard security technologies and methods.

Features :

- Securely Encrypt SMS and MMS with CryptoGraf Messaging
- Peer to Peer Encryption, without any servers needed
- Secure international roaming for mobile users
- Text SMS and MMS in any language (supported by phone)
- Change SIM cards and still keep communications private
- MMS includes text, image, sound and video clips
- Easy to use with mobile Messaging App's Inbox, Sent and Other Folders
- Prevent snoopers and thieves from reading private messages on your mobile
- Prevent wire-tappers and operators from scanning your private messages
- Localised menus and dialogs for phones with English, German, Spanish or Thai
- Send SMS Invites for your contacts to download and use the Free Version
- Free Version (no time limit) for secure communication with 2 contacts
- Purchase CryptoGraf Activation Code to communicate with more contacts

The Most Secure Crypto (Technical Info):

- RSA Crypto Key size 1024 or 2048 bits for Encryption
- AES Crypto Key size 256 bits for Encryption
- SHA256 with RSA Digital Signature
- X.509 Standard Secure Public Key Digital Certificate (Crypto Contacts)
- P2P Secure Public Key Exchange

ecurity Mobility Usability :

- Randomizer of Crypto Keys uses images from mobile phone gallery
- Exchange Crypto Contacts by bluetooth, sms or mms
- Forward Crypto Contacts
- Backup or Restore private Crypto Profile
- Export or Import X.509 Public Key Digital Certificates

Over 50 Mobile Phones Supported! (including Nokia E61)

Lenovo P930
LG KS10 JoY
Nokia 3230, 3250
Nokia 5500, 5700,
Nokia 6110, 6120, 6260, 6290, 6600, 6630, 6670, 6680, 6681, 6682
Nokia 7610
Nokia E50
Nokia E60, E61, E61i, E62, E65, E70, E90
Nokia N70, N71, N72, N73, N75, N76, N77
Nokia N80, N80i
Nokia N90, N91, N92, N93, N93i, N95
Panasonic X700, X800
Samsung SGH-D710, SGH-D720, SGH-D730, SGH-Z600, SGH-i400, SGH-i520
Vodafone V702NK, V804NK

 

2. Using CryptoGraf Messaging v2.5

CryptoGraf uses standard crypto methods to keep your messages secure. Now you can send encrypted sms or mms to your Crypto Contacts .

Begin by creating a personal Crypto Profile,exchange Crypto Contacts and then send messages to your Crypto Contacts. The way you receive Crypto Contacts, from other people, determines the Trust level assigned.

High trust for Crypto Contacts receive by bluetooth.

Medium trust for Crypto Contacts forwarded from High trust Crypto Contacts.

Low trust for Crypto Contacts received by sms or mms.

Assigning these levels of trust to Crypto Contacts helps to prevent "man-in-the-middle" attacks, where the middle-man can then impersonate and see all the correspondence between both sides.

To keep more than two Crypto Contacts, get a CryptoGraf Activation Code . For instructions on getting an activation code go to http://www.CryptoGraf.com (internet and mobile accessible). An activation code will also allow generating the personal Crypto Profile with RSA 2048 bit keys, which is more secure than RSA 1024 bit keys, but will increase the size of messages sent and received.

An encrypted and digitally signed sms will be sent with a minimum overhead of 3 sms packets. An encrypted and digitally signed mms will have a minimum overhead of 10KB.

All CryptoGraf messages in the sent folder are encrypted and cannot be read using the mobile's Messaging App.

All CryptoGraf messages in the drafts folder are also encrypted and cannot be read using the mobile's Messaging App. However, using the Messaging App to edit encrypted messages in the drafts folder can make them corrupted and unusable in CryptoGraf.

Recommendations:

Check the Logs folder frequently to monitor for any unauthorised use of CryptoGraf Messaging by people who handle your mobile phone.

Use a password, in main Options--Settings menu, to protect access to your secret messages and your Crypto Contacts. After starting CryptoGraf Messaging, password will only be needed the first time you try to send or open a message, or access Crypto Contacts folder.

Periodically use the Randomizer, in main Options menu, to keep the quality of crypto keys secure the more you send messages.

Technical Info:

The personal Crypto Profile consists of RSA public key (in X.509 digital certificates) and RSA private key.

The RSA private key is never sent when exchanging Crypto Contacts. The RSA private key is always kept on the mobile. A back up (requiring a password) of the RSA private key can be made to another directory on the mobile from where it can be copied to another device.

Crypto Contacts are compatible with X.509 digital certificates and contain RSA (1024/2048 bit) public keys.

CryptoGraf messages are encrypted and digitally signed using S/MIME standard based methods. Messages are encrypted using AES-256 bit, and digitally signed using RSA (1024/2048 bit) with SHA-256.

 

3. Quick Start Guide to Using CryptoGraf Messaging

When CryptoGraf Messaging is started, a Privacy Statement dialog will inform you that the application uses the phone Contacts database, bluetooth, SMS and MMS to exchange information with other mobiles. This is according to Symbian standard practice to make users aware of the features and functionality used by each application they install. You will then be asked if you don't want to see this information dialog in future.

Start by creating personal Crypto Profile

1. Start CryptoGraf Messaging
2. Click on any folder you will automatically be guided to create My Crypto Profile.
3.1. If you want to use the Free Version, select "Yes"
- 1024 bits Crypto Key size is used by default
3.1. If you purchased and received a CryptoGraf Activation Code, select "No"
- Select message containing your CryptoGraf Activation Code
- Select 1024 or 2048 bits Crypto Key size
4. Select an image for the Randomizer of Crypto Keys
5. Enter personal info and expiry date for My Crypto Profile
6. Select own name from phone Contacts database
7. Enter password and confirm to protect the private Crypto Key

Send own Crypto Contact to others

1. Select Crypto Contacts folder
2. Select My Crypto Profile
3. Options->Send Crypto Contact
- Via bluetooth (recipient will get High Trust Crypto Contact)
- Via SMS/MMS (recipient will get Low Trust Crypto Contact)

Receive and Save Crypto Contacts

1. Select message containing Crypto Contact received in Inbox
2. Options->Save Crypto Contact
3. Select name from phone Contacts database
- Crypto Contacts received by bluetooth are High b Trust
- Crypto Contacts received by sms/mms are Low Trust

Send Message Keep Secret with all Crypto Contacts !

Note: You can also forward Crypto Contacts on to others.

 

4. Size of an SMS sent by CryptoGraf Messaging

CryptoGraf Messaging will send encrypted and digitally signed sms with a minimum overhead of 3 sms packets.

 

5. Size of an MMS sent by CryptoGraf Messaging

CryptoGraf Messaging will send encrypted and digitally signed mms with a minimum overhead of 10KB.

Each MMS can have 1 text section, 1 image and a variable number of sound/video clips attached. The number of attachments is limited to 5 per MMS.

See menu Options ->Objects

The maximum size of MMS is 100KB. This is due to a limitation set by the mobile device and also the mobile network.

 

6. Getting and Using CryptoGraf Activation Code

When you receive (via SMS or via bluetooth) the Activation Code:

Start the CryptoGraf Messaging app

- simply click on the message containing the Activation Code.

or

- choose main menu Options->Register
- then click on the message containing the Activation Code.

You will then be able to keep more than 2 Crypto Contacts and get more secure message encryption.

For instructions on purchasing an Activation Code to get the full features of CryptoGraf Messaging visit http://www.CryptoGraf.com.

An Activation Code will also allow generating a personal Crypto Profile with RSA 2048 bits Crypto Key, which is more secure than RSA 1024 bits Crypto key, but will increase the size of messages sent and received.

The Activation Code is tied to the phone's serial number (or IMEI) only.

To see the mobile phone's serial number (or IMEI) enter:

*#06# and dial.

 

7. Create Personal Crypto Profile

Before sending messages and keeping secrets, begin by creating a personal Crypto Profile. When your personal Crypto Contact has been exchanged with other Crypto Contacts, then you can send encrypted messages to other Crypto Contacts.

CryptoGraf uses standard crypto methods to keep messages secure. Now you can send encrypted and digitally signed sms or mms to your Crypto Contacts.

The first time you use CryptoGraf Messaging, when you click on any menu item, you will automatically be guided through the process to create "My Crypto Profile".

- If you want to use the Free Version, select "Yes"
- 1024 bits Crypto Key size is used by default
- If you purchased and received a CryptoGraf Activation Code, select "No"
- Select message containing your CryptoGraf Activation Code
- Select 1024 or 2048 bits Crypto Key size
- Select image to seed the Randomizer of Crypto Keys
- Enter Name, Organization, Country and Expiry Date for personal Crypto Profile
- Optionally, enter Phone Number and Email Address for personal Crypto Profile
- Wait for Crypto Profile to be generated
- Select own contact name from the phone Contacts database to match the Crypto Profile
- Enter password and Confirm to protect the private Crypto Key.

 

8. Send Own Crypto Contact to others

A Crypto Contact can be sent by bluetooth, sms or mms. The method used to send Crypto Contacts impacts the Trust level assigned when it is received.

- Select the Crypto Contacts folder (scroll down main folders towards the last folder)
- Select "My Crypto Profile"
- Select Options -> Send Crypto Contact
- Select Via bluetooth, Via SMS, or Via MMS

It is also possible to forward Crypto Contacts received from someone, using the same procedure outlined above.

Note: When sending personal Crypto Contact, only the Crypto Contact portion which contains the public key and identity info (Name, Organization, Country, etc.) is sent.

 

9. Saving Crypto Contact

Crypto Contacts received in the Inbox can be saved

- Select the message containing Crypto Contact received
- Options->Save
- Select contact name from the phone Contacts database to match the Crypto Contact.

Note: It is not possible to assign more than one Crypto Contact to the same contact name in phone Contacts database.

 

10. Invite Contacts to Download and Use CryptoGraf Messaging

Each time Free Version users exit the Inbox folder, you will be asked if you want to invite your contacts to use CryptoGraf Messaging. If you click "Yes", you will able to choose the contacts you wish to send the SMS Invite. You can choose multiple contacts to receive the invitation. The SMS Invite contains a message with a link for your contacts to download and use the Free Version.

Users who purchased a Activation Code, and used that to enable the full functionality of CryptoGraf Messaging will not be prompted to Invite their contacts to download and use the Free Version. You can still send SMS Invites by clicking on the main menu Options->Invite.

 

11. CryptoGraf Messaging to Access My folders

Open and delete messages stored in My folders.
Move messages from Inbox, Sent and Drafts folders to be stored in My folders.

Note:

CryptoGraf Messaging cannot access messages stored in subfolders of My folders.
CryptoGraf Messaging cannot access subfolders created in My folders.

 

12. CryptoGraf Messaging to Access Drafts folder

CryptoGraf stores messages by encrypting them in the drafts folder. Encrypted messages cannot be read using the phone's Messaging App. However, using the Messaging App to edit encrypted messages in the drafts folder can make them corrupted and unusable in CryptoGraf Messaging.

 

13. CryptoGraf Settings

To enable Logs and Password prompt go to main menu Options->Settings

Enable log records to keep track use of CryptoGraf Messaing. Logs are a good way to detect unauthorized use CryptoGraf Messaging by people who handle your phone.

Enable password prompt for access to messages folders, Crypto Contacts, and Settings.

Change password for access to messages folders, Crypto Contacts, and Settings.

 

14. Trust Level(MY and H, M, L)

The trust level assigned to each Crypto Contact is indicated with an icon.
MY (purple) icon indicates that the Crypto Contact belongs to the owner of the mobile phone.

H (blue) icon indicates that the Crypto Contact was received via bluetooth.So the Crypto Contact is assigned as High trust since it was received during a personal meeting.

M (yellow) icon, for Medium Trust, indicates that the Crypto Contact was received by being forwarded from a High trust Crypto Contact.?The Medium Trust Crypto Contact was received indirectly via an established High Trust Crypto Contact by bluetooth, sms, or mms.A Medium Trust Crypto Contact could also have been initially received as a Low Trust Crypto Contact, and then verified manually.

L (grey) icon, for Low Trust, indicates that the Crypto Contact was received via sms or mms. The Low Trust Crypto Contact is considered as such since it was not received during a personal meeting nor forwarded from an established High trust Crypto Contact.

A Low Trust Crypto Contact can be turned into a Medium Trust Crypto Contact after it is verified manually by reading and confirming the fingerprint to make sure that the sender and receiver have the same fingerprint.

- Select a Low Trust Crypto Contact
- Options-> Show Info
- Compare the Fingerprint with the sender of the Crypto Contact
- Choose menu More to display further details about the Crypto Contact received
- Once the Low trust Crypto Contact has been verified, select it again
- Options -> Trust Contact so that it appears as a Medium Trust Crypto Contact.

 

15. Crypto Contact Information

- Select Crypto Contact or My Crypto Contact
- Choose menu Options->Show Info
- The following information will be displayed
Owner: Name of the person who created the Crypto Contact.
Validity: Start and end date for valid use of the Crypto Contact.
Fingerprint: Unique number which indicates that the Crypto Contact is not corrupted.
- Choose menu More, to display further details as follows
Owner: Name of the person who created the Crypto Contact.
Issuer: Name of the person who created or forwarded the Crypto Contact.
Validity: Start and end date for valid use of the Crypto Contact.
Public key algorithm: Uses RSA Encryption as the standard crypto method.
Public key: Key size, 1024 bits or 2048 bits.
This is followed by display of the actual public key. CryptoGraf users who
purchased an Activation Code generate 2048 bits key size.
Signature algorithm: The Crypto Contact uses SHA1 with RSA Encryption as the
standard crypto method to verify and forward Crypto Contacts. This is to keep compatibility with X.509 digital certificates.
Fingerprint algorithm: The Crypto Contact uses SHA1 as the standard crypto
method to generate the fingerprint as an indication that it is not corrupted.
This is to keep compatibility with X.509 digital certificates.
Fingerprint: Unique number which indicates that the Crypto Contact.

 

16. Export/Import Crypto Contact

Crypto Contacts can be exported or imported from the directory-> installed_drive:\system\data\cgdata as X.509 digital certificates.

Imported X.509 digital certificates will always be saved as a Low trust Crypto Contact,

A Low Trust Crypto Contact can be turned into a Medium Trust Crypto Contact after it is verified manually by reading and confirming the fingerprint to make sure that the sender and receiver have the same fingerprint.

- Select a Low Trust Crypto Contact
- Options-> Show Info
- Compare the Fingerprint with the sender of the Crypto Contact
- Choose menu More to display further details about the Crypto Contact received
- Once the Low trust Crypto Contact has been verified, select it again
- Options -> Trust Contact so that it appears as a Medium Trust Crypto Contact.

 

17. Backup/Restore My Crypto Contact

It is advisable to make a backup of My Crypto Profile to the file system, so that it can be restored in case of any problems. Since this backup contains your private Crypto Key, you will always have to use a password to protect the backup of My Crypto Profile. The security of this backup depends on the quality of your password.

The backup will be saved in the directory ->installed_drive:\system\data\cgdata.

To restore a backup of the Crypto Profile, enter the correct password. If the restored Crypto Profile is different from the one in current use, all other Crypto Contacts will be reverted to Low trust.

The Crypto Profile is restored from the directory ->installed_drive:\system\data\cgdata\.

Caution: The Crypto Profile contains your private key, so it should always be kept private. It is essential to protect the backup of My Crypto Profile with a good password.

 

18. Re-create Personal Crypto Profile

Be careful when you re-create your personal Crypto Profile. All your established Crypto Contacts will revert to Low Trust level. You can still send encrypted and digitally signed sms and mms to other Crypto Contacts but they will be unable to read the message until they receive your current Crypto Contact. You can send your new Crypto Contact to others by bluetooth, sms or mms.

- Choose the Crypto Contacts folder (scroll down main folders towards the last folder)
- Choose menu Options->New My Crypto Profileid
- If you want to use the Free Version, select "Yes"
- 1024 bits Crypto Key size is used by default
- If you purchased and received a CryptoGraf Activation Code, select "No"
- Select message containing your CryptoGraf Activation Code
- Select 1024 or 2048 bits Crypto Key size
- Select image to seed the Randomizer of Crypto Keys
- Enter Name, Organization, Country and Expiry Date for personal Crypto Profile
- Optionally, enter Phone Number and Email Address for personal Crypto Profile
- Wait for Crypto Profile to be generated
- Select own contact name from the phone Contacts database to match the Crypto Profile
- Enter password and Confirm to protect the private Crypto Key.

 

19. Logs folder

Logs help keep track of CryptoGraf usage. It's also a good way to detect unauthorized CryptoGraf use by people who handle your phone.

Logs keep a record of:

- Time the Randomizer was used.
- Crypto Profile creation details
- Crypto Contact exchange