Open-source licences
Ironbox is built on the following open-source components. We are grateful to the people who wrote them.
Apache License 2.0
The following are used under the Apache License, Version 2.0:
- AndroidX — core, lifecycle, activity, navigation, documentfile, biometric, fragment · © The Android Open Source Project
- Jetpack Compose, including Material 3 and the Material Symbols icon set · © The Android Open Source Project
- AndroidX Media3 (ExoPlayer) · © The Android Open Source Project
- Kotlin standard library and kotlinx.coroutines · © JetBrains s.r.o. and Kotlin contributors
Bouncy Castle Licence
Bouncy Castle (bcprov-jdk18on) ·
© Legion of the Bouncy Castle Inc., used under the
Bouncy
Castle Licence, an MIT-style licence.
It provides the Argon2id key derivation that turns your PIN into the vault key. We use the pure-Java implementation deliberately: it runs identically on your device and in our tests, so the cryptography is verified by the same code path that ships.
None of these components send anything anywhere. The current version
of Ironbox holds no INTERNET permission at all, so no
library inside it — ours or anyone else's — can open a network
connection.