Popular crypto app uses XOR and nothing else, hacker says

A programmer has levelled stern criticism at the designers of a super popular encryption app they say fails its core purpose: encryption.
 
The programmer using the alias NinjaDoge24 ran analysis of the NQ Vault app, and said it used only XOR (exclusive operator) to safeguard files.
 
NQ Vault has been downloaded more than 10 million times on the Google Play store alone and is also available on iOS.
The company behind the app stands by its product, calling its security "appropriate" and adding that messages, chats, calls logs, and contact information is encrypted using AES-128.
 
"Image and video files are stored in a format not readily readable by other applications and can only be viewed in Vault after entering the correct password on the device," the company says.
 
Full Article