App Encryption Documentation for Submission to Apple App Store

Encryption Details

Algorithm Type

The app uses 1024-bit asymmetric encryption to safeguard user and device identities. The encryption is implemented using a custom cryptographic solution that adheres to internationally recognized encryption standards.

Purpose of Encryption

The encryption in this app ensures:

• Data Security: Protects sensitive user and device identity data during transmission and storage.
• Authentication: Validates user identity and device integrity to prevent unauthorized access.

Implementation Specifics

1. Encryption Key Generation: Keys are generated dynamically using device-specific attributes and user identity information to ensure uniqueness and mitigate replay attacks.
2. Key Storage: The private key is securely stored in the device’s Keychain (iOS) using secure storage APIs provided by Apple.
3. Encryption Process:
   • Data is encrypted on the client side using a 1024-bit RSA public key.
   • Decryption is performed server-side using the corresponding private key.

Standard Compliance

The encryption algorithm follows the RSA standard, which is widely accepted by international bodies such as IEEE, IETF, and ITU. No proprietary or non-standard algorithms are used.

Use of Apple’s Encryption APIs

The app uses Apple’s built-in cryptographic libraries, including Security.framework and CommonCrypto, to implement secure key storage and encryption/decryption processes.

Non-Exempt Encryption Key

The app’s Info.plist file includes the App Uses Non-Exempt Encryption key with the value set to YES, as the app incorporates encryption beyond Apple’s provided libraries and uses standard, internationally recognized cryptographic algorithms.

APP Details

1. App Information

• App Name: Turp Health & Home Care
• Bundle Identifier: io.spinex.turp
• Developer Name:Spinex IO Bilisim Teknolojileri AS

2. Encryption Usage

• Type of Encryption: 1024-bit asymmetric encryption (RSA)
• Purpose: Protects user and device identity data during transmission and storage
• Implementation: Utilizes Apple’s Security framework and CommonCrypto library

3. Compliance Details

• Standard Algorithms: The app uses standard encryption algorithms accepted by international standard bodies (e.g., IEEE, IETF, ITU)
• Non-Exempt Encryption: The app uses non-exempt encryption and includes the App Uses Non-Exempt Encryption key set to YES in the Info.plist file

4. Export Compliance

• U.S. Export Administration Regulations (EAR): The app complies with U.S. export laws and regulations
• Bureau of Industry and Security (BIS) Reporting: The app may require annual self-classification reporting to the U.S. government

5. Additional Information

• Key Management: Private keys are securely stored using Apple’s Keychain services
• Data Security: Ensures confidentiality and integrity of user data through robust encryption mechanisms

6. Contact Information

• Developer Contact: [email protected]

Conclusion

The encryption in this app meets international standards and provides robust security for user and device identity data.