elqio

Contribute

A protocol is reviewed by many. Here is what is useful, and how to reach us.

Review the specifications

The specifications cover the protocol, identity, the network, stamps and transports. Every design decision is written and dated there. Reviewing means looking for what is missing, what is ambiguous, what contradicts another part.

If you have practice in cryptography, anonymous networks, LoRa radio or embedded systems, write to us: we open access to reviewers on request.

Offer a review

Run a relay

The network welcomes relays run by others than us. A relay runs on Linux, updates itself through threshold-signed releases, and can neither read messages nor know who writes to whom. It requires hybrid post-quantum TLS towards the other relays.

Tell us if you want to run one: we send you the procedure.

Build a box

The plans for the box, Raspberry Pi or equivalent, LoRa module, phone interface, are provided with the software. Each box extends its neighbourhood's radio network and proves the transports in real conditions: rooftops, distance, old lines.

If you have a roof, a neighbourhood or a phone line to lend to the network, we want to know you.

Report a vulnerability

If you find a weakness in the protocol, the specifications or the code, write to us directly and give us time to fix it before any publication. We answer, we give credit, and we publish the fix with the decision that goes with it.

Avoid sending sensitive details in the clear: describe the nature of the problem first and we will agree on a channel.

Report to root@elqio.com

What we commit to

  • Open the specifications and the code to reviewers who ask.
  • Write and date every design decision.
  • Use only audited cryptographic libraries. Never home-made crypto.
  • Answer every security report.

Contact

For everything else: root@elqio.com.

ELQIO is a service of CAPACOM.