Skytale encrypts every message on your device before it leaves. The server relays ciphertext it has no key for — not to be trusted, but to be unable to help. Voice and video calls go peer to peer.
One email when Skytale hits the stores. Nothing else, ever.
We store the address and the date. No IP, no tracking, no third parties.
How it works
Named after the Spartan cipher rod: a strip of parchment that reads as nonsense unless you hold a rod of the matching diameter.
Your identity keypair is generated on the device and the private half never leaves it. It is held in the secure enclave-backed keystore, not in app storage.
Starting a conversation runs X3DH against a batch of one-time prekeys you published in advance. Each is used once and destroyed, so the session can be set up while you are offline.
Content is encrypted with AES-256-GCM under a key derived from that handshake. What reaches the server is a blob it cannot open, and the same is true for attachments and voice notes.
Your local message database is encrypted at rest with SQLCipher, keyed from the device keystore. A copied phone backup is not a readable transcript.
What is actually inside
Standard, well-reviewed primitives from the noble libraries. Nothing here was invented for this app.
| Purpose | Primitive |
|---|---|
| Session establishment | X3DH |
| Key agreement | X25519 |
| Signatures on prekeys | Ed25519 |
| Key derivation | HKDF-SHA256 |
| Message & attachment encryption | AES-256-GCM |
| Local database at rest | SQLCipher |
| Calls | WebRTC (DTLS-SRTP) |
Forward secrecy currently covers session setup, not every individual message: the Double Ratchet is implemented in neither client nor server yet, so compromising a device's long-term key would expose that conversation's history. It is the next piece of work, and it is listed here rather than quietly omitted. Skytale has also not had an independent security audit. Until it has, treat it as promising rather than proven.
Progress
Skytale is in active development and not yet released. This list is kept honest on purpose — it is the same list the developers work from.
Support the work
Two people on different networks often cannot reach each other directly, and the call needs a TURN relay in between. Relays are bandwidth, and bandwidth is the single largest running cost here. This is the immediate hardware need.
Encryption nobody independent has examined is a promise, not a guarantee. Funding a review by people with no stake in the answer is what turns one into the other.
Per-message forward secrecy is the largest remaining piece of cryptographic work, and the difference between good and properly good.
If you or your organisation fund privacy infrastructure, we would like to hear from you at hello@skytale.site.