Discrypt

An encrypted communication system where Rust-owned security boundaries, content-blind relays, device state, retention, and UX honesty are visible product states.

Live 3D architecture

The scene beside this panel is this system's architecture. Drag to rotate, scroll panel to read on.

Problem

Secure messaging products often compress complex realities: relays, metadata, device keys, retention, replay, recovery, into vague claims that users and engineers cannot inspect.

Contribution

Implemented the approved phased plan across Rust crates, deterministic harnesses, and a React/Tauri shell: media protection, relay overlay, text/history delivery, retention/shred semantics, governance/admission, signaling/push metadata, and UX safety copy.

Architecture

Discrypt separates cryptographic, transport, relay, storage, and UI contracts. Media protection uses Rust-owned SFrame-like AEAD boundaries so raw media keys never cross into JavaScript. Relay overlay work ranks routes, enforces a strict hop cap, models failover and store-forward delivery, and keeps relays content-blind. The product shell exposes friend verification, device state, invite admission, retention, metadata posture, and deletion caveats instead of hiding them behind vague security copy.

Technical decisions

SFrame-like AEAD media protection with sender, device, counter, and KID binding kept in Rust

Relay overlay ranking by latency, stability, energy cost, freeload penalty, and deterministic tie-breaking

A strict three-hop relay cap, replay rejection, tamper rejection, TTL-bound store-forward, and failover smoke coverage

Tauri command facade with stable serialized snapshots consumed by the React product shell

Safety-number verification, device management, invite admission, retention presets, and metadata warnings surfaced as UI states

Tradeoffs

Research correctness over premature production claims

Explicit security caveats over marketing language

Rust-owned sensitive boundaries over easier browser-only implementation

Outcome

A deep security/distributed-systems artifact that demonstrates protocol-aware frontend work, product honesty, and systems engineering beyond a standard UI build.

visual evidence · 1/5