The server cannot read a word you send.
Post-quantum encrypted messenger. Built on ML-KEM-1024
Real ChaCha20-Poly1305 (RFC 8439), compiled from Rust to WebAssembly, running in your browser. Same primitive family as the QERYX protocol; demo build, not the shipped crypto-core module.
01 / THE FLOOR — WHAT THE RELAY HOLDS
-
Seal
Your device seals every message under ChaCha20-Poly1305 before it leaves your hand. The key is agreed with hybrid ML-KEM-1024 + X25519 and lives only on your devices. The relay receives ciphertext it cannot open — there is no server-side key to steal or subpoena.
-
Verify
You check your peer's key yourself: a safety number in your hand, no directory trusted. Both devices derive the same number from the session itself. Read it aloud, scan it, compare it — the check runs on your device, zero server round-trip.
-
Carry
Three hops carry sealed bytes. Entry knows you but not your destination. Exit knows the destination but not you. The middle knows neither. Each hop peels one encryption layer — never the message.
02 / THE ECOSYSTEM — EIGHT CHAPTERS
Open any one. They are all sealed the same way.
This is not QKD. Not quantum networking. Not quantum teleportation. We do not violate the no-communication theorem. We bind a key-derivation function to a verifiable physical measurement no classical adversary can fabricate in advance.
03 / KEY AGREEMENT — LIVE
Watch two clouds land on one secret.
Two independent systems converge on one shared secret. Scroll — the agreement runs as you pass.
04 / THE DEADLINE — PUBLISHED, NOT PREDICTED
Read the deadline. It is already published.
The standards bodies have published the deadline. QERYX ships the deadline algorithms today.1
- 2022 CNSA 2.0 announced (CNSSP-15).
- 2024 FIPS 203 and FIPS 204 finalized (August 2024).
- 2027 ML-DSA-87 mandatory for new NSS signatures; ECDSA and RSA sunset.
- 2030 ML-KEM-1024 mandatory for NSS key establishment.
- TODAY QERYX ships hybrid ML-KEM-1024 + X25519, ML-DSA-87 signing, forward secrecy per message.
Forward secrecy is the strongest layer of the harvest-now-decrypt-later defence: a key that no longer exists cannot be decrypted later.
CNSA 2.0 — asymmetric core conformant (ML-KEM-1024 + ML-DSA-87 at Category V; SHA-512 at or above the hash floor). Production AEAD today is ChaCha20-Poly1305 (RFC 8439), a documented deviation; the AES-256-GCM NSS suite is implemented and reserved as suite 0x0002, staged for rollout. Pre-evaluation checklist: 0 non-conformant findings, 3 documented deviations (NIAP ETR, 2026-05).
- KEM ML-KEM-1024
- SIG ML-DSA-87
- ECDH X25519
- AEAD ChaCha20-Poly1305
- HASH SHA-512
- KDF HKDF-SHA-512
1 — sources: CNSSP-15, NIST FIPS 203/204. Verified line by line on /trust.
05 / THE LADDER — NOTHING IS FOR SALE YET
Take the whole build. No screen here takes money.
v1 sells nothing. Every invited account carries every capability in this build, and no screen in the app takes money. When the tiers open there is no free seat, because a free seat is paid for with the person sitting in it.
-
Philanthropic
The full messenger at maximum capability.
-
Armed
ARMED — FOR EVERYONEThe whole ecosystem, unlocked.
-
Shadow
The underground, for work that cannot surface.
Every existing feature runs at maximum capability for everyone. Higher tiers unlock new capabilities — apps, tools, modes — and never upgrade a primitive you already had.
Step through.
Your keys are born on your device. Download and make the first one.