E2E Encryption
Absolute Cryptographic Security
Your privacy is our utmost priority. Every single message, voice call, video stream, and file transfer is encrypted using the industry-standard Signal Protocol before it ever leaves your device.
The Double Ratchet Algorithm
Our encryption doesn't rely on a single static key. We utilize the Double Ratchet Algorithm, which mathematically generates a brand new, unique encryption key for *every single message* you send. This provides Perfect Forward Secrecy; even if a key is somehow compromised today, it cannot be used to decrypt your messages from yesterday.
Military-Grade Standards
We use X3DH (Extended Triple Diffie-Hellman) for initial key agreement, leveraging the insanely fast Curve25519 elliptic curve. Once a secure channel is established, message payloads are encrypted using AES-256-GCM, ensuring both confidentiality and strict authenticity via HMAC-SHA256.
Zero-Trust Client
Discuss App operates on a strict zero-trust model. The backend servers act merely as blind routers. The decryption keys physically never leave the secure enclave of your hardware. This means it is mathematically impossible for us, our engineers, or any third party to read your messages.
Cryptographic Identity Verification
Verify the identity of your contacts using out-of-band QR code scanning or safety number comparisons. This completely eliminates the risk of Man-in-the-Middle (MitM) attacks, ensuring you are always talking to exactly who you think you are.
How Your Data is Protected:
- ✓ Device-Local Keys: Keys generated locally; we never have access.
- ✓ Perfect Forward Secrecy: Past messages cannot be decrypted if keys leak.
- ✓ Future Secrecy: The ratchet heals itself if a key is compromised.
- ✓ Cryptographic Deniability: Messages cannot be definitively linked to you.
- ✓ End-to-End by Default: No "Secret Chat" toggle. Everything is encrypted.
- ✓ Open Source Crypto: Leveraging extensively audited primitives.