E2E Encryption
E2E encryption for all messages and direct data exchanged between peers, using NaCl box (Curve25519 ECDH + XSalsa20-Poly1305). Keys are derived from the user's password and protected at rest; the server stores only public keys and wrapped private-key blobs — it never sees plaintext.
E2E Encryption — Design
Architecture
E2E Encryption — Requirements
Overview
E2E Encryption — Testing
Test strategy