Nysiris Files

⚠️ Experimental / pre-audit release. Nysiris has not had an independent security audit. The Sphinx core in crates/ is a reference implementation, never production crypto. Suitable for testing and experimentation — do not rely on it for high-stakes anonymity yet. See docs/05-security.md for the full threat model.

What's new in 0.1.19

• Keystore-backed social identity (Android): the NysirisKeystore Capacitor plugin holds AES-256-GCM keys in the hardware-backed Android Keystore; only ciphertext touches SharedPreferences. Verified by JVM framing tests (5/5) and an on-device smoke test on an API-34 emulator (2/2 green). Desktop browsers keep the localStorage fallback.
• Exit-rotation jitter: reconnect recommendation now fires on a randomised 50±10 request window so rotation timing is not itself a signal.
• Adversarial chaos harness for the reply tracker/budget: replay storms, SURB hoarding bursts, clock skew, budget floods (7 tests, all green).
• Service drift guards: nym-sdk pin check in ./build.sh check plus a weekly services build in CI.
• Fixed: android:allowBackup contradiction — backups are now off, so app/WebView data never lands in cloud backup.

Install notes

• Linux: .deb below (system Chromium required).
• Windows: .zip below, run Nysiris.bat (Edge/Chrome auto-detected).
• Android: .apk/.aab below are unsigned — sideload for testing; not for the Play Store. Backups disabled; keys live in the device Keystore.
• Checksums: SHA256SUMS.txt.

Verification

./build.sh check green at tag time: 61 Rust tests, 123 web tests, zero clippy warnings, manifests + doc links valid.