Android · iOS · Desktop
Trois clients. Même chiffrement. Même protocole wire, byte-identical, validé par Known-Answer-Tests gated en CI. Aucun fork de Signal : tout le code est sous com.bcrypto.qaudion.*
Q-AUDION Android
Kotlin 2.2.20, Jetpack Compose, Hilt DI, multi-module. Cryptographie : BouncyCastle PQC (ML-KEM-1024) + X25519 + HKDF-SHA256 + AES-256-GCM. WebRTC via io.getstream:stream-webrtc-android. ML on-device avec TFLite + ONNX Runtime pour l'anti-deepfake.
- Signal-free: zero import di org.thoughtcrime.securesms
- FCM push notifications con google_services.json committato
- Due flavor: home (VPS dev) + production (voip.bcrypto.com)
Q-AUDION iOS
QAudionEngine come Swift Package standalone. ML-KEM-1024 + AES-256-GCM + Double Ratchet con label HKDF costanti. Wire format byte-identical con Android. CoreML deepfake detection. NFC + QR PSK exchange per Sovereign Mode.
- TestFlight via GitHub Actions su tag push v*
- Adaptive CBR padding 256-byte costanti
- Secure Enclave integration per key wrap
Q-AUDION Desktop
Electron + Svelte + TypeScript strict. PQ-hybrid: ML-KEM-1024 + X25519 + X448 combinati via HKDF-SHA-512, bit-compatibile con Android. Encrypted-at-rest stores. Backup .qabk con scrypt + AES-256-GCM. Panic wipe one-click.
- Pure-JS crypto stack (no native modules)
- @noble/post-quantum + @noble/curves
- Group calls via pairwise PQ handshakes