Q-AUDION Earbud
Encrypting earbud with dedicated processor, on-device NPU and post-quantum encryption executed entirely inside the hardware TEE. The microphone is never connected to the phone operating system.
Dual-world architecture
The Q-AUDION firmware separates the secure world (SPE, certified Trusted Execution Environment) from the non-secure world (NSPE, RISC-V). Everything that touches plaintext audio or cryptographic material lives exclusively in the Secure World, behind the NSC gateway.
- SPE: cracen_aead, cracen_mlkem, audio_pipeline, mic_capture
- NSPE: BLE LE Audio, OFDM modem, role manager, OTA
- Bound Audio Path: the physical microphone is routed exclusively to the SPE
3 selectable audio modes
Q-AUDION supports three LE Audio modes, one at a time by design: music (BAP/PACS sink + LC3 decode), Q-AUDION encrypted calls (Opus + ML-KEM-1024 + hardware AEAD accelerator), and standard cellular calls (TMAP/CCP passthrough). Switching modes is instant, but never simultaneous — closing off any cross-mode data leak.
- Custom GATT service for encrypted calls
- Spotify / Apple Music work natively
- Standard cellular telephony via TMAP (requires Android 13+ or iOS 18+)
On-device anti-deepfake
An INT8-quantized LCNN model performs liveness detection on the remote voice inside the embedded NPU. Per-frame scores are delivered to the phone via GATT in real time. Works on unencrypted calls too.
- Trained on ASVspoof 2019
- Inference latency <30ms per audio frame
- 0-100 score exposed via custom GATT characteristic
Architecture
The earbud is the fortress. The phone is the glass.
Hardware anchor of trust
The earbud is the fortress. The phone is the glass.
Q-Audion Earbud
Secure Element + PQC engine
MEMS mic
hardware-bound
Secure Element
tamper-resistant
Per-call keys
ephemeral
Anti-tamper
boot-locked
Host phone
vehicle, not vault
Compromised OS does not affect security. It only sees ciphertext.
↕ BLE · ciphertext only ↕
Trust anchor lives in the earbud
Not the phone. Not the cloud.
Your phone can be malware-ridden
The earbud doesn't care.
Hardware-bound keys
Never extractable. Never on the phone.