// open source
Read the important part.
Encryption you can't inspect is a promise, not a property. The part of CarrierPony that has to be right — the cryptography — is public.
PGPonyCore
CarrierPony's crypto engine is PGPonyCore, an OpenPGP implementation in Swift published under the Apache-2.0 license. It handles key generation (Ed25519 + Curve25519), encryption, decryption, signing, and verification — and it interoperates with GnuPG, so its behavior can be checked against the reference tooling everyone already trusts.
Shared with PGPony
The same core powers PGPony, the family's full OpenPGP toolkit. Every eye on that code benefits both apps: one engine, twice the scrutiny.
Why the core and not just claims
- Verifiable: the exact code that seals your envelopes is readable, diffable, and testable against GnuPG.
- Standard: OpenPGP is a documented format, not a proprietary protocol — your data isn't locked to this app.
- Honest: if you find a flaw, it can be reported, fixed, and audited in the open. See the security page for how.
License
PGPonyCore is licensed under Apache-2.0 — free to read, use, and audit.