🔐 Encryption and Security

🔐 End-to-End Encryption for Messages: Next-Level Security

Digital communication security is more important than ever. With rising threats to online privacy, it’s crucial to ensure that only the sender and recipient can read exchanged messages.

With Evegram’s latest update, messages will be protected through end-to-end encryption (E2E), preventing anyone – including us – from intercepting or accessing private conversations.

How Does Encryption Work in Evegram?

We have implemented a system based on Elliptic Curve Diffie-Hellman (ECDH) with X25519, using libsodium, one of the most trusted cryptographic libraries. Here’s how it works:

✔ ECDH X25519 key pair generation – Each user generates a public and private key pair.

✔ Public key sharing via QR code – Users can display their public key in QR code format for easy key exchange.

✔ QR scanning to obtain the peer’s public key – The recipient can scan the sender’s QR code to retrieve their public key.

✔ Derivation of a symmetric key for AES-256-GCM – Using the Diffie-Hellman protocol, a shared key is generated to encrypt messages.

✔ Secure encryption and decryption – Messages are protected with AES-256-GCM, one of the strongest encryption standards available.

✔ Secure key storage – Private keys are stored in a secure area of the device, protecting them from external threats.

Why Does This Matter?

This system ensures that messages can be read only by the sender and recipient, with protection that prevents any interception. Unlike other messaging apps that rely on central servers, Evegram uses a fully decentralized approach to key management.

Now, two devices can easily exchange public keys via QR codes and start sending end-to-end encrypted messages with total security!