Security Whitepaper

Luban Lock uses industry-standard symmetric encryption to protect user data. The cryptographic core has been audited by independent third-party security firms.

• Symmetric encryption: AES-256-GCM for media and metadata
• Key derivation: PBKDF2 with high iteration count and per-vault salt
• Authentication: HMAC-SHA-256 for integrity protection of metadata
• Hardware-backed storage: Secure Enclave / Android Keystore where available

Encryption keys never leave the device. Master keys are derived from the user's password and stored in the platform's secure storage (Keychain on iOS, Keystore on Android).

There is no cloud backend. Encrypted vaults live entirely on the user's device. Backups are encrypted files under the user's control.

Luban Lock is designed to protect against:

• Casual physical access by family, friends, or thieves
• Cloud provider data breaches (we have no cloud data)
• Mass surveillance and tracking through advertising SDKs (we include none)
• Device loss — combined with strong password and biometrics

Luban Lock is NOT designed to protect against nation-state adversaries with prolonged physical access to an unlocked device, or against coercion. The decoy password feature mitigates some coercion scenarios.

Our cryptographic core is audited by independent firms on a regular cadence. Audit reports are available to enterprise customers and security researchers under NDA. We follow responsible disclosure and respond to vulnerability reports within 7 business days.

Our commitment:

• We do not collect your data
• We do not operate a cloud that stores your media
• We do not include advertising SDKs or social trackers
• We pledge to open-source and shut down rather than break these principles

security.s7Body