Security
What we protect. What we don't. Honestly.
What We Guarantee
Encryption Integrity
Changed byte in ciphertext → decryption fails. Wrong key → error, not random data. Wire: 12B nonce || ciphertext || 16B Poly1305 tag.
Entropy Detection
RANDU: z = −301. LFSR: z = −328. glibc: z = +4.6. Shannon reports 7.999 for all — blind. OS urandom: correctly healthy, zero false alarms.
Adaptive Monitoring
0 false alarms in 250 windows. CSPRNG → RANDU transition: detected in first 8 KB. Anti-poisoning baseline drift: 0.0000 after 20 attack windows.
Backup & Recovery
Encrypted vault backups are ciphertext-only on the relay. Shamir shard restore never exposes the vault key to the server. Wrong shard combination fails — no silent corruption.
What We Cannot Protect Against
Screenshots
We cannot prevent the recipient from capturing their screen. Disappearing messages are best-effort.
Compromised Device
If your phone is rooted or has system-level malware, no app can protect you.
State-Level Targeting
If a nation-state has physical access to your device, we cannot guarantee security.
Subtle Entropy Mixing
PL detects strong algebraic structure. It does not detect gradual mixing of good and bad RNG below 100% substitution.
Every product that claims to be “unbreakable” is lying. Security is a spectrum, not a switch. We tell you exactly where our defenses are strong and where they end — because informed users make better decisions than users who believe in magic.
FAQ
Frequently Asked Questions
How is APPEIRON different from Signal?▼
Signal pioneered E2E encrypted messaging. APPEIRON builds on that foundation and adds what no other messenger offers: live entropy verification, post-quantum hybrid encryption in every chat, VoiceGuard caller verification, Proof-of-Read certificates, Guardian protection, and Shamir vault recovery.
What is entropy monitoring?▼
Every encryption key is generated from random numbers. If those numbers aren't truly random, your keys are weak. Entropy monitoring continuously tests quality and alerts you if something changes. Think of it as a health monitor for your encryption.
What does the Health Score mean?▼
One scale across APPEIRON: 95–100% Excellent — high-quality randomness. 70–94% Good — minor fluctuations. Below 70% Degraded — remediation runs and you get notified.
Can APPEIRON read my messages?▼
No. Messages are encrypted on your device and decrypted only on the recipient's device. Our servers relay encrypted blobs — we never hold the keys. This is a mathematical guarantee, not a policy promise.
What is Quantum Vault?▼
An encrypted storage space on your device for sensitive files. Everything is encrypted with the same engine as messages. Physical Burn (Pro/Vault) overwrites deleted vault data with cryptographic entropy — distinct from Quantum Burn on Base.
What is Mesh mode?▼
Peer-to-peer communication via Bluetooth and local WiFi when the internet is unavailable. In emergencies — natural disasters, infrastructure failures, censorship — Mesh mode lets you reach nearby contacts.
Is APPEIRON post-quantum secure?▼
Yes — hybrid ML-KEM-768 + X25519 key exchange is live in every chat today. An attacker must break both layers. Entropy is also validated for ML-KEM, ML-DSA and SLH-DSA. The AR lattice has no period, so period-finding attacks do not apply.
Do I need a phone number or email?▼
No. APPEIRON identities are cryptographic keys generated on your device. No phone number, no email, no address book upload. You connect with contacts by exchanging QR codes or invite links.
What can your servers see?▼
Encrypted blobs and the minimum routing data needed for delivery. With Sealed Sender, even the sender identity inside the envelope is encrypted. No message content, no media, no keys ever touch our servers in plaintext.
What is VoiceGuard?▼
On-device voice analysis during calls. It compares the caller’s voice to a previously enrolled voiceprint (is this really the person I know?) and shows a live stress index computed from prosody — pitch, jitter, energy. It is a stress indicator, not a lie detector, and all analysis runs locally on your phone. Nothing is uploaded.
Can you recover my data if I lose my phone?▼
No — and that’s by design. Keys exist only on your device. If you lose the device and have no encrypted backup, the data is gone. Pro+ offers an encrypted vault backup you control; we can never read it.
Is APPEIRON open source?▼
We plan to open-source the client after initial security audit.
Who is behind APPEIRON?▼
APPEIRON is developed by Cascade Investment LLC, an independent company focused on applied cryptography, secure communications, and privacy-first software.
What is Guardian?▼
A Guardian-tier feature for mutual consent protection. You invite someone you trust; they accept on their device. If you trigger a silent alarm — manually or automatically during a high-stress call — your Guardian contact receives an encrypted location request. No surveillance. No tracking by default. Only when protection is needed.
What does the Team tier include?▼
Everything in Pro+, plus an in-app admin panel to create organizations, generate APEIRO-ORG seat-pack codes, set a shared relay URL for all members, and optionally lock the relay so nobody can point at an unknown server.
How does Shamir vault recovery work?▼
Your vault key is split into shards using Shamir secret sharing. You assign shards to trusted contacts. If your device is lost, you combine enough shards with an encrypted backup ID to restore — without APPEIRON or the relay ever seeing your plaintext key.
What does Base include?▼
Base is the entry tier (one-time purchase — no trial needed). It covers daily E2E chat & calls, groups, disappearing messages, Quantum Burn, Proof-of-Read, Entropy Health Monitor, media editor, and anonymous identity in 13 languages. Quantum Vault, Physical Burn (vault), and Mesh are Pro.
What is the difference between a Group and Team?▼
A Group is where you chat and call (like a project channel). Team is your company roster and policies (who is employed, which relay server, how many seats). A company typically has one Team org and many Groups inside it.
How do I add someone to my Team organization?▼
Admin creates the org in Settings → Team organization, copies the APEIRO-ORG code, and sends it to employees. Each person redeems it under Plan & access. Then run Sync org contacts — they appear automatically. You do not pick them from your contact list manually.
How do I start a group video conference?▼
Open a group chat (not a 1:1 chat). Any member taps the phone or video icon in the top bar. Participants need Pro+, Direct link enabled, and a current app build. Requires TURN for calls over mobile networks.
Can Team be time-limited?▼
Yes — via store subscriptions (monthly/yearly). When the subscription ends, Team features stop after the billing period. Organization membership on the relay is seat-based, not date-based; manage access by removing members or cancelling seats.
Is APPEIRON only a Team app?▼
No. APPEIRON is a full privacy messenger for everyone. Base is the paid entry plan (one-time). Team is an optional upgrade for organizations. Individuals never need Team for chat, calls, or vault (with Pro).
About
Beyond encryption. Beyond trust.
APPEIRON was born from a simple observation: every encrypted messaging app in the world trusts its random number generator blindly. If that generator fails — hardware degradation, supply chain compromise, deliberate backdoor — the encryption is silently compromised, often for years.
We built a messenger that encrypts messages and continuously verifies that the encryption is actually working — at the mathematical level, in real time, on your device.
The Company
APPEIRON is developed by Cascade Investment LLC — privacy technology grounded in mathematics and measurable guarantees.
Contact: contact@appeiron.app
