Lume - Secure Messenger
A messaging platform built with an obsessive focus on privacy and resistance to forensic attacks, ensuring absolute confidentiality of communications.
Hi
11:49 PM
Test
11:50 PM
Reply to Test
Test
Okay, got it.
11:50 PM
End-to-End Encrypted
Core Features
Technical & Security Architecture
A look at the layers that make Lume a digital fortress.
Message Encryption
Implements Complete Forward Secrecy. Each message uses an ephemeral X25519 key pair and a one-time pre-key to derive a secret (ECDH). The payload is encrypted with XSalsa20-Poly1305.
File Encryption
Supports two modes: Block for small files (encrypted with XSalsa20) and Streaming, which uses XChaCha20-Poly1305 SecretStream to process large files in chunks with AEAD integrity.
Secure Groups
Collective encryption ensures PFS per recipient. Each member has a unique, constantly ratcheting group key, and all messages are individually signed with Ed25519 to ensure authenticity.
Device Detection
Proactive analysis to detect root/jailbreak (using JailMonkey and searching for binaries like `su`), emulators (React Native DeviceInfo), and instrumentation hooks (Frida/Xposed).
Forensic Resistance
Upon detecting a threat, a secure wipe (wipeAllData) is triggered, overwriting data with random values. This, combined with at-rest encryption, makes data recovery computationally infeasible, even with sophisticated forensic tools.
Minimal Infrastructure
The REST API (Express/JWT) and WebSocket server act as a simple relay. No messages are stored, only encrypted metadata and pre-keys, ensuring the server cannot read the content.