SECURITY SPECIFICATION
Cryptographic Architecture.
01 //ECDH KEY EXCHANGE (P-256)
ECDH key exchanges are executed in-browser using standard Web Crypto APIs. Private keys reside strictly in volatile memory and are never transmitted over the wire.
02 //AES-256-GCM SYMMETRIC ENCRYPTION
Symmetric keys derived from the ECDH shared secret are salted with the local URL hash seed. All active message payloads are encrypted locally using authenticated AES-256-GCM.
03 //CLIENT-SIDE ENCRYPTION FRAGMENT
Decryption key segments reside strictly behind the URL hash (#) fragment. Because browser engines do not transmit hash fragments to web servers, your keys stay 100% client-side.
04 //MEMORY OVERWRITE & PURGE
VOID is entirely logless. Upon session termination, all active keys are discarded, local memory buffers are cleared, and signaling socket connections are shredded instantly. Local access is protected via visual privacy locks and automated inactivity shields.