openpgp-api VS OpenKeychain

Hi everyone, I am developing an app which needs to communicate with another android app. This other app uses intents to communicate (in particular this is the API: https://github.com/open-keychain/openpgp-api)

https://issuetracker.google.com/issues/238257723 https://github.com/open-keychain/open-keychain/pull/2804

In addition to my PC set up I am also using the Android Password Store in combination with OpenKeyChain. Everything works fine except that decrypting any password simply works without requiring my PIN. I've tried both USB C connection and NFC and neither interface requires the PIN.

OpenKeychain is an Android app for doing some basic GPG related work. It can verify signatures (hidden in the "encrypt/decrypt" menu)

Also it integrates i.e. with K-9 mail to sign and verify.

https://github.com/open-keychain/open-keychain

OpenKeychain https://www.openkeychain.org/ integrates with multiple apps for encrypting your mail, plain texts, backups, xmpp chats.

I don't know what features you are looking for in encryption software but OpenKeychain is foss, audited and works just fine if you just want basic encryption/decryption/signing.

OpenKeychain: Easy PGP (version 5.8.0): Encrypt your Files and Communications. Compatible with the OpenPGP Standard.

I use mailbox.org with the encrypted inbox, Mozilla Thunderbird on desktop, and FairEmail + OpenKeychain on Android. I think StartMail is the only other one of those four options that supports standard IMAP and SMTP.

On Android OpenKeychain, TermBot, and K-9 Mail, are awesome.

I would try openpgp, you can use https://www.gpg4win.org/ on windows and https://github.com/open-keychain/open-keychain (not actively developed, if someone knows a good alternative please comment) for android.