Rust compiled to WebAssembly in an isolated Web Worker. Cryptographic operations never touch the main thread.

RFC 9420 with AES-256-GCM. Every message encrypted on your device before it leaves.

Three independent encryption layers. MLS group keys, non-extractable WebCrypto channel keys, and optional hardware attestation. Patent pending.

Content-bound hash ratchet detects tampering, reordering, and gaps. Encrypted heartbeats for fork detection.

WebRTC with SFrame E2EE per RFC 9605. Every call encrypted end-to-end.

AGPL-3.0 licensed. Full source available for audit. Rust, TypeScript, React, PostgreSQL.