Key Generation & Exchange
At the start of every session, Curve25519 Elliptic Curve Diffie-Hellman key exchange is executed on-device. Ephemeral keys are derived per message (HKDF), securing perfect forward secrecy.
Payload & Media Encryption
Text messages, photos, videos, and documents are encrypted with AES-256-GCM before leaving hardware boundaries. Media streams are chunked into independent encrypted payload blocks.
Zero-Knowledge Relays
Our relay infrastructure operates on a strict zero-knowledge model. Relay servers pass cipher packets without holding decryption keys. Temporary offline message queues are purged immediately upon delivery.
Responsible Disclosure
If you identify security vulnerabilities or issues, please report them directly to our security response team:
security@call1.jp