Choosing secure IM for Android

I decided to look for some protected messenger, to see what people have done in all this time. Tested more than 20 instant messengers of varying degrees of readiness. Only messengers with “their” protocol were interested, since in the XMPP world, everything is normal and expected.
I was mainly interested in instant messengers for text communication with encryption in any form. The search was performed on Google Play with the phrases: “secure chat”, “secure IM”, “secure communication”, “secure messaging”.
I tested only free solutions.

tl; dr: there is still no Skype replacement.

Actually, here are all my finds:
')
1. TextSecure

• It works both via the Internet and via SMS. Uses encryption without authentication of the interlocutor, there is not even a fingerprint. You need to follow the key icon in the messages. Does not announce plintext
• For registration you need a phone number. Registration is not required (but only works via SMS)
• Only messages
• Android only
• Open source

2. TigerText

• More enterprise option. It can work on the Internet with both a phone number and mail (mode "for domain")
• Everything sent and sent self-destructs in a maximum of 30 days (default 5)
• No verification of the interlocutor, not even a key
• Messages, photos, audio recordings
• For registration you need either a phone number or mail
• Android / iOS

3. Chiffry

• Keys are generated when you first start. Nice interface
• There are key fingerprints
• Messages, calls, sending files and contacts. Group chats
• For registration need a phone number
• The description on Google Play says that AES256-CGM + 512-bit (?) ECDH keys are used.
• Android / BlackBerry

4. Vipole

• Tied to Vipole services. To generate a key, you need to drive a finger. Not only IM, but also other VIPole services - notes, password manager
• Requires money for a lot, for example, to encrypt local history
• You can set a password for the account and a password for the key. You can set a fake password for the key, which will either crash the program, or both crash and delete data
• No fingerprint verification
• For registration need mail
• Messages, calls, video calls, file transfer, group chats and calls
• Looks like a great business solution.
• AES-256, RSA-3072
• Android / Windows / MacOS / Linux

5. Unseen

• No interlocutor check, no key stamp
• Messages / Audio Video Calls / Group Audio Video Calls / Files
• Free account allows you to make audio conferences up to 5 people. Video conferencing in the free version available
• Login Registration
• 4096-bit NTRU
• Android / MacOS / Linux / Windows

6. Sicher

• IM from the creators of IM +
• Messages, group chats and files
• Messages self-destruct
• No verification of the interlocutor, not even the fingerprint of the key
• Registration by phone
• Android / iOS / WinPhone

7. Whistle.im

• Only posts. For registration, no phone, no mail, only a username and password are required. User Confirmation by Key Stamp
• Android / Browser
• Encryption Library Source Code Available

8. Surespot

• Registration only using login / password. PGP is used and its keyserver
• Fingerprints are not checked.
• Messages, voice messages (paid), pictures
• 521-bit ECDH + AES256-GCM
• OpenSource client and server
• The website describes encryption in detail.
• Android / iOS

9. Wickr

• Fingerprints are not checked.
• Messages self-destruct a maximum of 6 days.
• Messages, photos, audio recordings.
• For registration, you only need to come up with a login. No mail.
• AES256, ECDH521 TLS
• Android / iOS

10. Antox

• Well, about Tox you already know everything, probably. Somewhere NAT did not make it and communication did not succeed at all. This is the biggest misfortune of P2P communications without a server.
• Open source
• Cross platform

11. Seecrypt SC3

• AES 256 & RC4 384
• Messages / audio calls / files
• Android only

12. Telegram

• Quite convenient instant messenger with a visual fingerprint. There are no fingerprint checks. Two modes of operation: protected and unprotected chat rooms.
• AES-IGE + SHA1
• Messages / Files
• Open protocol, OpenSource client, but not server
• Android / iOS / Windows / MacOS / Linux / Browser

findings

Everything is somewhat sad. Pleased with Chiffry, but he is still raw and proprietary; Surespot was pleased with the description and openness, I was somewhat interested in Vipole. But everyone else is uncomfortable or unpleasant. We continue to use XMPP + OTR / SIP + ZRTP.