elqio

The network

The protocol is in service end to end: relays, stamps, four transports, apps and devices. Here is what runs, and how it is kept.

What runs

  • Core

    ELQIO-1 cryptography

    Hybrid X-Wing key exchange, composite Ed25519 and ML-DSA-65 signatures, ChaCha20-Poly1305. Message envelope, sessions. In Rust, on audited libraries.

  • Identity

    Identifiers and registry

    32-character identifiers, a registry of signed events, chained and replicated, verifiable by anyone. Public revocation, never access to content.

  • Relays

    Relay network

    Three-relay circuits, onion routing, pseudonymous mailboxes, redundant fragments. Mandatory hybrid post-quantum TLS 1.3 between relays, placement beacon, key rotation.

  • Stamps

    Anonymous stamps

    Blind-signed stamps, verified by relays. Purchase per session through the anonymous network, isolated gateway, signed counts published daily by the guards.

  • Transports

    Four routes

    Internet through the relays. LoRa radio from box to box, roof to roof, free. Audio modem over a plain phone line. Satellite, through a partner operator.

  • Profiles

    Compact, Rich, real time

    Short text over every transport; long texts, images, files and deferred voice over networks with good throughput; encrypted point-to-point video calls.

  • Apps

    Applications

    iOS, Android and desktop. The same core as the relays and the devices.

  • Devices

    elqio.os and the box

    A dedicated phone, reflashed with a minimal system. A build-it-yourself box: home relay, radio gateway, audio modem, terminal.

Continuously verified

No relay ever sees both a client's IP address and a mailbox label. This property is not asserted: an automated non-linkability proof is replayed on the logs of every relay at each demonstration.

Relays update themselves from threshold-signed releases, approved by several maintainers at once, and reproducible builds that anyone can recompile and compare. A relay that does not require hybrid post-quantum TLS is not accepted into the network.

Mode
Stamp required, mandatory hybrid TLS
Proof
Non-linkability, automated, replayed at each demonstration
Updates
Threshold-signed, reproducible builds
Code and specifications
Reviewer access on request: contribute

Extend the network

The network grows through those who hold it: a relay on Linux, a box on a roof, a phone line on loan.

Run a relay or build a box See the devices