Loki

Today, Loki combines: - direct peer discovery on local networks - BLE-assisted discovery for nearby peers - cryptographic identity based on user-owned DIDs - X3DH session establishment with a persisted Double Ratchet - encrypted local persistence with RAM-only paths for sensitive flows - a full duress layer with wipe, ghost mode, biometric revocation, and panic gestures ## What Loki Is At a high level, Loki is an experimental secure messenger for users who want: - no central identity authority - strong local-device privacy guarantees - visible trust signals when channels are real and secure - the ability to switch into a believable decoy state under pressure The project is not just about end-to-end encryption. It is about the full lifecycle of trust: - how identities are established - how keys evolve over time - what gets written to disk - what remains only in RAM - what happens when the user is coerced ## Core Principles - **Local-first trust**: the app assumes hostile networks and untrusted intermediaries. - **User-owned identity**: identities are derived from device-held cryptographic material, not server-issued accounts. - **Defence in depth**: encryption, storage, transport, and UI all carry separate security responsibilities. - **Plausible deniability**: duress handling is a first-class feature set, including secure wipe and a decoy interface. - **Minimal leakage**: the project actively audits plaintext persistence, metadata exposure, and UI cues that could reveal sensitive state.