reMail security bolstered with iMAS !!

Google open source project reMail. We reviewed their todo list and decided to add iMAS security and make reMail an iMAS reference application.

Checkout the list of security features we added below:

The following is now available in reMail:
    - Access
      - App Password protecting access to the app
    - Ant-tampering
      - Debugger and jailbreak detection
    - Data at rest:
      - Email Database wrapped in SQLCipher
      - Sensitive email account credentials locked down with SecureFoundation
    - App Password used to encrypt SQLCipher database
    - Run-time:
      - Sensitive email account information encrypted while in memory
    - opensource OpenSSL crypto
    - runs in simulator and on devices
    
Coming soon:
    - FIPS compliant version (in separate github repo) Oct 2013
    - Network certificate pinning (Nov 2013)
    - iOS v7 compatible (Dec 2013)

Copyright 2012,2013 The MITRE Corporation, All Rights Reserved.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this work except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

// ReMailIPhone, http://code.google.com/p/remail-iphone // Copyright 2010 Google Inc. //
// Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at //
// http://www.apache.org/licenses/LICENSE-2.0 //
// Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License.

/*

• MailCore
• Copyright (C) 2007 - Matt Ronge
• All rights reserved.
• Redistribution and use in source and binary forms, with or without
• modification, are permitted provided that the following conditions
• are met:
• 1. Redistributions of source code must retain the above copyright
• notice, this list of conditions and the following disclaimer.
• 2. Redistributions in binary form must reproduce the above copyright
• notice, this list of conditions and the following disclaimer in the
• documentation and/or other materials provided with the distribution.
• 3. Neither the name of the MailCore project nor the names of its
• contributors may be used to endorse or promote products derived
• from this software without specific prior written permission.
• THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
• ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
• IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
• ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
• FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
• DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
• OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
• HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
• LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
• OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
• SUCH DAMAGE. */

/*

• libEtPan! -- a mail stuff library
• Copyright (C) 2001, 2005 - DINH Viet Hoa
• All rights reserved.
• Redistribution and use in source and binary forms, with or without
• modification, are permitted provided that the following conditions
• are met:
• 1. Redistributions of source code must retain the above copyright
• notice, this list of conditions and the following disclaimer.
• 2. Redistributions in binary form must reproduce the above copyright
• notice, this list of conditions and the following disclaimer in the
• documentation and/or other materials provided with the distribution.
• 3. Neither the name of the libEtPan! project nor the names of its
• contributors may be used to endorse or promote products derived
• from this software without specific prior written permission.
• THIS SOFTWARE IS PROVIDED BY THE AUTHORS AND CONTRIBUTORS ``AS IS'' AND
• ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
• IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
• ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE
• FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
• DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
• OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
• HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
• LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
• OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
• SUCH DAMAGE. */

/*

SBJSON

Copyright (C) 2008 Stig Brautaset. All rights reserved.

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

Neither the name of the author nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */

/* CMU libsasl

• Tim Martin
• Rob Earhart
• Rob Siemborski / /
• Copyright (c) 1998-2003 Carnegie Mellon University. All rights reserved.
• Redistribution and use in source and binary forms, with or without
• modification, are permitted provided that the following conditions
• are met:
• 1. Redistributions of source code must retain the above copyright
• notice, this list of conditions and the following disclaimer.
• 2. Redistributions in binary form must reproduce the above copyright
• notice, this list of conditions and the following disclaimer in
• the documentation and/or other materials provided with the
• distribution.
• 3. The name "Carnegie Mellon University" must not be used to
• endorse or promote products derived from this software without
• prior written permission. For permission or any other legal
• details, please contact

•  Office of Technology Transfer
  

•  Carnegie Mellon University
  

•  5000 Forbes Avenue
  

•  Pittsburgh, PA  15213-3890
  

•  (412) 268-4387, fax: (412) 268-7395
  

•  [email protected]
  

• 4. Redistributions of any form whatsoever must retain the following
• acknowledgment:
• "This product includes software developed by Computing Services

• at Carnegie Mellon University (http://www.cmu.edu/computing/)."
  

• CARNEGIE MELLON UNIVERSITY DISCLAIMS ALL WARRANTIES WITH REGARD TO
• THIS SOFTWARE, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
• AND FITNESS, IN NO EVENT SHALL CARNEGIE MELLON UNIVERSITY BE LIABLE
• FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
• WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN
• AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING
• OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */

The OpenSSL toolkit stays under a dual license, i.e. both the conditions of the OpenSSL License and the original SSLeay license apply to the toolkit. See below for the actual license texts. Actually both licenses are BSD-style Open Source licenses. In case of any license issues related to OpenSSL please contact [email protected].

/* ====================================================================

• Copyright (c) 1998-2008 The OpenSSL Project. All rights reserved.
• Redistribution and use in source and binary forms, with or without
• modification, are permitted provided that the following conditions
• are met:
• 1. Redistributions of source code must retain the above copyright
• notice, this list of conditions and the following disclaimer.
• 2. Redistributions in binary form must reproduce the above copyright
• notice, this list of conditions and the following disclaimer in
• the documentation and/or other materials provided with the
• distribution.
• 3. All advertising materials mentioning features or use of this
• software must display the following acknowledgment:
• "This product includes software developed by the OpenSSL Project
• for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
• 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
• endorse or promote products derived from this software without
• prior written permission. For written permission, please contact
• [email protected].
• 5. Products derived from this software may not be called "OpenSSL"
• nor may "OpenSSL" appear in their names without prior written
• permission of the OpenSSL Project.
• 6. Redistributions of any form whatsoever must retain the following
• acknowledgment:
• "This product includes software developed by the OpenSSL Project
• for use in the OpenSSL Toolkit (http://www.openssl.org/)"
• THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
• EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
• IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
• PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
• ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
• SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
• NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
• LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
• HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
• STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
• ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
• OF THE POSSIBILITY OF SUCH DAMAGE.
• ====================================================================
• This product includes cryptographic software written by Eric Young
• ([email protected]). This product includes software written by Tim
• Hudson ([email protected]).

*/

/* Copyright (C) 1995-1998 Eric Young ([email protected])

• All rights reserved.
• This package is an SSL implementation written
• by Eric Young ([email protected]).
• The implementation was written so as to conform with Netscapes SSL.
• This library is free for commercial and non-commercial use as long as
• the following conditions are aheared to. The following conditions
• apply to all code found in this distribution, be it the RC4, RSA,
• lhash, DES, etc., code; not just the SSL code. The SSL documentation
• included with this distribution is covered by the same copyright terms
• except that the holder is Tim Hudson ([email protected]).
• Copyright remains Eric Young's, and as such any Copyright notices in
• the code are not to be removed.
• If this package is used in a product, Eric Young should be given attribution
• as the author of the parts of the library used.
• This can be in the form of a textual message at program startup or
• in documentation (online or textual) provided with the package.
• Redistribution and use in source and binary forms, with or without
• modification, are permitted provided that the following conditions
• are met:
• 1. Redistributions of source code must retain the copyright
• notice, this list of conditions and the following disclaimer.
• 2. Redistributions in binary form must reproduce the above copyright
• notice, this list of conditions and the following disclaimer in the
• documentation and/or other materials provided with the distribution.
• 3. All advertising materials mentioning features or use of this software
• must display the following acknowledgement:
• "This product includes cryptographic software written by

• Eric Young ([email protected])"
  

• The word 'cryptographic' can be left out if the rouines from the library
• being used are not cryptographic related :-).
• 4. If you include any Windows specific code (or a derivative thereof) from
• the apps directory (application code) you must include an acknowledgement:
• "This product includes software written by Tim Hudson ([email protected])"
• THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
• ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
• IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
• ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
• FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
• DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
• OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
• HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
• LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
• OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
• SUCH DAMAGE.
• The licence and distribution terms for any publically available version or
• derivative of this code cannot be changed. i.e. this code cannot simply be
• copied and put under another distribution licence
• [including the GNU Public Licence.] */

/*

File: Reachability.m / Reachability.h Abstract: SystemConfiguration framework wrapper.

Version: 1.5

Disclaimer: IMPORTANT: This Apple software is supplied to you by Apple Inc. ("Apple") in consideration of your agreement to the following terms, and your use, installation, modification or redistribution of this Apple software constitutes acceptance of these terms. If you do not agree with these terms, please do not use, install, modify or redistribute this Apple software.

In consideration of your agreement to abide by the following terms, and subject to these terms, Apple grants you a personal, non-exclusive license, under Apple's copyrights in this original Apple software (the "Apple Software"), to use, reproduce, modify and redistribute the Apple Software, with or without modifications, in source and/or binary forms; provided that if you redistribute the Apple Software in its entirety and without modifications, you must retain this notice and the following text and disclaimers in all such redistributions of the Apple Software. Neither the name, trademarks, service marks or logos of Apple Inc. may be used to endorse or promote products derived from the Apple Software without specific prior written permission from Apple. Except as expressly stated in this notice, no other rights or licenses, express or implied, are granted by Apple herein, including but not limited to any patent rights that may be infringed by your derivative works or by other works in which the Apple Software may be incorporated.

The Apple Software is provided by Apple on an "AS IS" basis. APPLE MAKES NO WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, REGARDING THE APPLE SOFTWARE OR ITS USE AND OPERATION ALONE OR IN COMBINATION WITH YOUR PRODUCTS.

IN NO EVENT SHALL APPLE BE LIABLE FOR ANY SPECIAL, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) ARISING IN ANY WAY OUT OF THE USE, REPRODUCTION, MODIFICATION AND/OR DISTRIBUTION OF THE APPLE SOFTWARE, HOWEVER CAUSED AND WHETHER UNDER THEORY OF CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, EVEN IF APPLE HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Copyright (C) 2008 Apple Inc. All Rights Reserved.

*/

// ---------------------------------------------------------------------- // Part of the SQLite Persistent Objects for Cocoa and Cocoa Touch // // Original Version: (c) 2008 Jeff LaMarche ([email protected]) // ---------------------------------------------------------------------- // This code may be used without restriction in any software, commercial, // free, or otherwise. There are no attribution requirements, and no // requirement that you distribute your changes, although bugfixes and // enhancements are welcome. // // If you do choose to re-distribute the source code, you must retain the // copyright notice and this license information. I also request that you // place comments in to identify your changes. // // For information on how to use these classes, take a look at the // included Readme.txt file // ----------------------------------------------------------------------

/*

three20 (http://github.com/facebook/three20)

Copyright 2008 Joe Hewitt

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */

/*

• famfamfam icons: http://www.famfamfam.com/
• Icons used under the Creative Commons 2.5 Attribution License: http://creativecommons.org/licenses/by/2.5/ */