State-of-the-Art Cryptography
Engineered from the ground up without legacy cryptographic baggage. Every connection is secured with modern, audited algorithms.
Hundreds of thousands of lines of code
Bloated codebases with massive attack surfaces, sluggish cryptographic cipher negotiation handshakes, and high battery consumption on mobile devices.
- • RSA key exchange latency (~1.5s - 3s)
- • High CPU overhead on mobile devices
- • Frequent tunnel disconnects when switching networks
~4,000 Lines of Audited Kernel Code
Ultra-lean code surface running directly in the Linux kernel. Fixed, unnegotiable state-of-the-art ciphers that prevent cryptographic downgrade attacks.
- Curve25519 for ECDH key agreement
- ChaCha20 for symmetric encryption
- Poly1305 for cryptographic data authentication
- BLAKE2s for cryptographic hashing
Zero-Knowledge Key Generation
Your client private key is generated strictly inside your operating system’s secure enclave / WebCrypto engine. It is never transmitted across the network.
Data Minimization
We avoid collecting full browsing history, destination URLs, or arbitrary traffic logs. Tunnels maintain only the ephemeral state required for simultaneous device limits.
Instant Handshake Roaming
Transition seamlessly between Wi-Fi and mobile 4G/5G without losing your tunnel connection or dropping TCP packets.