
Only the recipient can read a message
- Every message is sealed on the sender’s phone with X25519 + Kyber (ML-KEM-1024) and AES-256-GCM.
- The server receives only a mailbox address and ciphertext — no sender, no recipient.
- 7 tests show that any other key fails, breaking X25519 alone is not enough, and tampering is rejected.









