OneKeePass / mobile

A secure password manager for iOS and Android platforms
GNU General Public License v3.0
79 stars 5 forks source link

Availability of app store for France #13

Open backthehox opened 8 months ago

backthehox commented 8 months ago

Please agree to the following

Summary

Onekeepass seems not available for french customer in app store for Iphone

Motivation

i'm a security responsible for a company and i would like to deploy onekeepass for Iphone of the company as we use keepass to store users' passwords.

Considered Alternatives

upload app's directly into our modern Device management tool (Microsoft Intune) to deploy on company Iphone

Anything else?

No response

jeyasankar commented 8 months ago

Hi @backthehox ,

Unfortunately I could not make it available in the France App store because I do not know how to get the "French encryption declaration" as required by Apple. Not much information is available in English to apply and get such a declaration form from France

Once that is figured out sometime later, the app will be available in France App store.

backthehox commented 8 months ago

Hi jeyasankar,

Ok understood, in case you need contact me maybe i can help. This kind of document is usually published by ANSSI which is the french regulation for cybersecurity.

Regards,

Le mer. 6 sept. 2023, 01:45, jeyasankar @.***> a écrit :

Hi @backthehox https://github.com/backthehox ,

Unfortunately I could not make it available in the France App store because I do not know how to get the "French encryption declaration" as required by Apple. Not much information is available in English to apply and get such a declaration form from France

Once that is figured out sometime later, the app will be available in France App store.

— Reply to this email directly, view it on GitHub https://github.com/OneKeePass/mobile/issues/13#issuecomment-1707448737, or unsubscribe https://github.com/notifications/unsubscribe-auth/ARSHRUZK2EP3WES3ULWI4DLXY62STANCNFSM6AAAAAA4KC33JQ . You are receiving this because you were mentioned.Message ID: @.***>

backthehox commented 8 months ago

I found a guy that post link on git https://gist.github.com/chrisballinger/7239932 It point on official website

Le mer. 6 sept. 2023, 01:45, jeyasankar @.***> a écrit :

Hi @backthehox https://github.com/backthehox ,

Unfortunately I could not make it available in the France App store because I do not know how to get the "French encryption declaration" as required by Apple. Not much information is available in English to apply and get such a declaration form from France

Once that is figured out sometime later, the app will be available in France App store.

— Reply to this email directly, view it on GitHub https://github.com/OneKeePass/mobile/issues/13#issuecomment-1707448737, or unsubscribe https://github.com/notifications/unsubscribe-auth/ARSHRUZK2EP3WES3ULWI4DLXY62STANCNFSM6AAAAAA4KC33JQ . You are receiving this because you were mentioned.Message ID: @.***>

levicki commented 6 months ago

How does the French authorization form even apply here if your app uses only iOS provided encryption methods and not custom implementations? You probably just have to declare that you aren't using any new / non-standard / custom encryption (that is, if you aren't using 3rd party libraries).

backthehox commented 6 months ago

Hello Exactly that's the point, as far as i know it is just a declaration to record the encryption method

Le sam. 28 oct. 2023 à 01:34, Igor Levicki @.***> a écrit :

How does the French authorization form even apply here if your app uses only iOS provided encryption methods and not custom implementations? You probably just have to declare that you aren't using any new / non-standard / custom encryption (that is, if you aren't using 3rd party libraries).

— Reply to this email directly, view it on GitHub https://github.com/OneKeePass/mobile/issues/13#issuecomment-1783612601, or unsubscribe https://github.com/notifications/unsubscribe-auth/ARSHRU3YXJGOE6NGNVRWWTTYBRAHZAVCNFSM6AAAAAA4KC33JSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTOOBTGYYTENRQGE . You are receiving this because you were mentioned.Message ID: @.***>

jeyasankar commented 6 months ago

Hi @levicki ,

The app uses rust crypto lib implementations for the standard encryption algorithms AES and ChaCha20 . The iOS provided encryption methods are not used. I do use the options for "Export Compliance Information" while submitting my app to App store like this

Screenshot 2023-10-31 at 11 18 35 AM Screenshot 2023-10-31 at 11 23 56 AM

If I tried to make it available in App store for France, I am asked to fill certain forms with some French org and provide the reference number.

I will try to play with some of these options again and see. Also I will try to look how other similar apps do for this

Mean while is there any way I can get the forms in English and understand the requirement.

levicki commented 6 months ago

@jeyasankar Maybe I am wrong (I am not a native English speaker), but to me the wording on the first screenshot you posted implies that if you don't select both options you can still use iOS standard encryption?

Sadly I have no idea where to find translated documents.

vrdsp0 commented 1 week ago

Hello, Not a lawyer, but here are the links, in French only : *FAQ on the statement to french Cyber authority ANSSI needed in case crypto means are used inside an app distributed through an App Store : https://cyber[dot]gouv[dot]fr/ faq-demande-dautorisation https://cyber[dot]gouv[dot]fr/ controle-reglementaire-sur-la-cryptographie-les-formulaires

*The statement to fill, it can be submitted by mail : https://cyber[dot]gouv[dot]fr/sites/default/files/2022-09/crypto_declaration-demande_autorisation_operations_annexe1_v2%5B1%5D.pdf

*One relevant link on the law which describes steps for the statement : https://www.legifrance.gouv.fr/loda/id/JORFTEXT000000646995

jeyasankar commented 1 week ago

Thanks @vrdsp0

These links will be useful. I plan to prepare and submit these docs in few months and hopefully then I can then make it available in App Store in France