No accounts
Open and use. No forced signup, no cloud identity binding.
ABOUT · Local by default · No ads
About StealthSend
A near-field encrypted transfer tool: Local by default, no ads, private keys stay in the engine.
Visible pairing
Signed QR and SAS digits. Trust only after mutual confirm.
Verifiable crypto
App-layer AES-GCM; engine & protocol Apache-2.0.
Roadmap
Engineering progress
Done means done; unfinished stays unfinished. This is the current state.
Security foundation
DoneAuthenticated encryption on every frame, protocolised nonces, 64-bit fingerprints.
Transfer performance
DoneStreaming IO, sliding window, and timeout governance — no more buffering whole files.
Cross-net paths
DoneNAT hole punching and relay hardening; candidate exchange still needs a signalling service.
Handshake hardening
DoneMoved to SIGMA-R: long-term keys only sign and never enter the KDF, so forward secrecy holds.
QUIC & migration
In progressThe QUIC channel exists; switching the main path and connection migration await device validation.
Independent audit
Not startedNot started. Until it ships, this site shows no audit badges (ADR-010).
Governance
How we work
Constraints live in the process, not in good intentions.
Decisions before code
Protocol and crypto changes land as an ADR first. Crypto changes require Rust unit tests.
No silent downgrades
What we cannot do is documented as a known gap in public — never reported as done.
Compatibility is a hard rule
The protocol keeps N/N-1 compatibility: versions must interoperate one step apart.
Facts
Project facts
- Open source
- Engine / protocol Apache-2.0; official clients proprietary
- Stack
- Rust engine + Flutter UI
- Key storage
- Private keys never enter Dart; platform secure storage
- Default mode
- Local (no server in the path)
- Ad SDKs
- None (banned by ADR-010)
- Decisions
- Architecture decisions are recorded as ADRs and traceable
Install first, decide later
The client runs Local by default. Read the security model in two minutes if you prefer.