Picocrypt-NG 2.16 ڈاؤن لوڈ

Downloads
───────────────┬───────────────────────────────────────┬──────────────────┬──────────────────────────────────────────────────────────┬────────┬─────────
Architecture │Windows │macOS │Linux │Android │Web
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
x86-64 (64-bit)│Installer · Portable · CLI │— │AppImage · .deb · Binary · CLI · Snap │APK │Open
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
ARM64 (AArch64)│— │DMG · CLI │Binary · CLI │APK │
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
ARMv7 (32-bit) │— │— │— │APK │
───────────────┼───────────────────────────────────────┼──────────────────┼──────────────────────────────────────────────────────────┼────────┼─────────
x86 (32-bit) │— │— │— │APK │
───────────────┴───────────────────────────────────────┴──────────────────┴──────────────────────────────────────────────────────────┴────────┴─────────
- 🌐 Web version — runs in any modern browser, nothing to install: https://picocrypt-ng.github.io/
- Android — universal APK (any device, larger): Download
- Windows 7/8 (legacy) CLI (x86-64): Download
- macOS builds are Apple Silicon (ARM64) only.
What's new in 2.16
- Signed releases: every release artifact (Windows, macOS, Linux, AppImage, Snap, Android) is now signed with keyless cosign and published with a build-provenance attestation, so a download can be verified against the exact GitHub Actions workflow that produced it; the old SHA-256 text blocks in the release notes are dropped in favor of verifiable signatures
- Desktop: stable tooltips: advanced-settings tooltips no longer flicker or jump — the flicker-prone custom tooltip was replaced with the fyne-tooltip library (#79)
- Android: hardening: generated keyfile bytes and password buffers are zeroed after use, names of saved files are sanitized before writing, and the app opts out of Android cloud backup so volumes and settings are never copied off-device
- Android: clearer errors: a failure to start an operation is now surfaced to the user instead of being silently swallowed
- Privacy: no on-disk logs: the file-logging sink was removed, so the app never writes log files that could reveal file names or activity
- Reliability: incomplete output is cleaned up if an operation is interrupted mid-stream — split, recombine, and write failures no longer leave stray chunks or half-written files behind
- Internal: removed dead code across the crypto, volume, and app packages, pinned crypto/keyfile/encoding paths to known-answer test vectors, and fixed documentation drift (API.md, ARCHITECTURE.md, CONTRIBUTING.md)
Full changelog: https://github.com/Picocrypt-NG/Picocrypt-NG/blob/main/Changelog.md#v216
Verifying your download
Every artifact is signed with keyless cosign (a <file>.sigstore.json bundle ships next to it) and carries a GitHub build-provenance attestation. No keys to trust — the signature is bound to the exact GitHub Actions run that built the file.
Build provenance (easiest, needs the gh CLI):
gh attestation verify <file> --repo Picocrypt-NG/Picocrypt-NG
Cosign bundle (download the matching <file>.sigstore.json too):
cosign verify-blob <file> \
--bundle <file>.sigstore.json \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity-regexp '^https://github.com/Picocrypt-NG/Picocrypt-NG/\.github/workflows/'