Skip to content

Commit 968fff9

Browse files
committed
Project Update: Transition to Desktop & Mobile Versions
1 parent 79c8d08 commit 968fff9

File tree

1 file changed

+38
-252
lines changed

1 file changed

+38
-252
lines changed

README.md

Lines changed: 38 additions & 252 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,28 @@
1616

1717
---
1818

19+
## 🚧 Project Update: Transition to Desktop & Mobile Versions
20+
21+
The **web version of SecureBit.chat** will remain available and stable,
22+
but **no major updates** are planned in the near future.
23+
24+
We are now focusing on developing **next-generation desktop and mobile applications** powered by **Tauri v2**,
25+
bringing new features that will be **fully backward-compatible** with the current web version:
26+
27+
- **Offline communication** via LoRa & mesh networking
28+
- **Improved encryption performance** with native crypto modules
29+
- **Cross-platform synchronization** between devices
30+
- **Local secure storage & hardware key integration**
31+
32+
These new builds will enable true **serverless communication** even under restricted or offline conditions.
33+
34+
If you appreciate our mission to build **decentralized, censorship-resistant communication**,
35+
please **support the project by starring it on GitHub** — your support helps development and visibility!
36+
37+
👉 [⭐ Star SecureBit.chat on GitHub](https://github.com/SecureBitChat/securebit-chat)
38+
39+
---
40+
1941
## 🎯 Overview
2042

2143
SecureBit.chat is a revolutionary peer-to-peer messenger that prioritizes your privacy with military-grade encryption. No servers, no registration, no data collection - just pure, secure communication.
@@ -41,7 +63,6 @@ SecureBit.chat is a revolutionary peer-to-peer messenger that prioritizes your p
4163
- Fix IndexedDB "database closing" errors with connection checking
4264
- Add individual transactions per queue item to prevent race conditions
4365

44-
4566
### 🛡️ Security Enhancements
4667
- **ECDH + DTLS + SAS System** - Triple-layer security verification
4768
- **ASN.1 Full Structure Validation** - Complete key structure verification
@@ -52,271 +73,36 @@ SecureBit.chat is a revolutionary peer-to-peer messenger that prioritizes your p
5273

5374
---
5475

55-
## 🏆 Why SecureBit.chat?
56-
57-
### Security Comparison
58-
59-
| Feature | **SecureBit.chat** | Signal | Threema | Session |
60-
|---------|-------------------|--------|---------|---------|
61-
| Architecture | 🏆 Pure P2P WebRTC | ❌ Centralized | ❌ Centralized | ⚠️ Onion network |
62-
| File Transfer | 🏆 P2P encrypted | ✅ Via servers | ✅ Via servers | ✅ Via servers |
63-
| PWA Support | 🏆 Full PWA | ❌ None | ❌ None | ❌ None |
64-
| Registration | 🏆 Anonymous | ❌ Phone required | ✅ ID generated | ✅ Random ID |
65-
| Traffic Obfuscation | 🏆 Advanced | ❌ None | ❌ None | ✅ Onion routing |
66-
| Data Storage | 🏆 Zero storage | ⚠️ Local database | ⚠️ Local + backup | ⚠️ Local database |
67-
| ASN.1 Validation | 🏆 Complete | ⚠️ Basic | ⚠️ Basic | ⚠️ Basic |
68-
69-
**Legend:** 🏆 Category Leader • ✅ Excellent • ⚠️ Partial/Limited • ❌ Not Available
70-
71-
### 19-Layer Military Security
72-
73-
1. WebRTC DTLS transport encryption
74-
2. ECDH P-384 perfect forward secrecy
75-
3. AES-GCM 256 authenticated encryption
76-
4. ECDSA P-384 message integrity
77-
5. Replay protection with timestamp validation
78-
6. Automatic key rotation (every 5 min/100 messages)
79-
7. MITM verification with out-of-band codes
80-
8. Traffic obfuscation and pattern masking
81-
9. Complete metadata protection
82-
10. Memory protection with no persistent storage
83-
11. Hardware security with non-extractable keys
84-
12. Session isolation and complete cleanup
85-
13. Mutex framework for race condition protection
86-
14. Secure key storage with WeakMap isolation
87-
15. Production logging with data sanitization
88-
16. ASN.1 complete key structure verification
89-
17. OID validation for algorithms and curves
90-
18. EC point format and structure verification
91-
19. HKDF key derivation with proper key separation
92-
93-
---
94-
95-
## 🚀 Quick Start
96-
97-
### Option 1: Use Online (Recommended)
98-
99-
1. Visit [securebitchat.github.io/securebit-chat](https://securebitchat.github.io/securebit-chat/)
100-
2. Install PWA by clicking "Install" button for native app experience
101-
3. Choose "Create Channel" or "Join Channel"
102-
4. Complete secure key exchange with verification
103-
5. Verify security codes and start chatting
104-
6. Communicate with military-grade encryption
105-
106-
### Option 2: Self-Host
107-
108-
```bash
109-
# Clone repository
110-
git clone https://github.com/SecureBitChat/securebit-chat.git
111-
cd securebit-chat
112-
113-
# Serve locally
114-
python -m http.server 8000 # Python
115-
npx serve . # Node.js
116-
php -S localhost:8000 # PHP
117-
118-
# Open browser
119-
open http://localhost:8000
120-
```
121-
122-
---
123-
124-
## 📂 Secure File Transfer
125-
126-
### Features
127-
- **P2P Direct Transfer** - No servers, direct WebRTC channels
128-
- **Military-Grade Encryption** - AES-GCM 256-bit + ECDH P-384
129-
- **Chunk-Level Security** - Individual encryption per file chunk
130-
- **Hash Validation** - SHA-384 checksums prevent tampering
131-
- **Automatic Recovery** - Retry mechanisms for interruptions
132-
- **Stream Isolation** - Separate channels from chat messages
133-
134-
### Supported Files
135-
Documents (PDF, DOC, TXT), Images (JPG, PNG, GIF), Archives (ZIP, RAR), Media (MP3, MP4), and any file type up to size limits.
136-
137-
---
138-
139-
## 🔧 Technical Architecture
140-
141-
### Cryptographic Stack
142-
143-
```
144-
📂 File Transfer: AES-GCM 256-bit + SHA-384 + Chunking
145-
🔐 Application: AES-GCM 256-bit + ECDSA P-384
146-
🔑 Key Exchange: ECDH P-384 (Perfect Forward Secrecy)
147-
🛡️ Transport: WebRTC DTLS 1.2
148-
🌐 Network: P2P WebRTC Data Channels
149-
📱 PWA: Service Workers + Cache API
150-
🔒 Validation: Complete ASN.1 DER parsing
151-
```
152-
153-
### Standards Compliance
154-
- NIST SP 800-56A (ECDH Key Agreement)
155-
- NIST SP 800-186 (Elliptic Curve Cryptography)
156-
- RFC 8446 (TLS 1.3 for WebRTC)
157-
- RFC 5280 (X.509 Certificate Structure)
158-
- RFC 5480 (EC Subject Public Key Information)
159-
160-
### Browser Requirements
161-
Modern browser with WebRTC support (Chrome 60+, Firefox 60+, Safari 12+), HTTPS connection, JavaScript enabled, Service Worker support for PWA.
162-
163-
---
164-
16576
## 🗺️ Roadmap
16677

16778
**Current: v4.5.22** - Browser Notifications & Code Cleanup ✅
16879

16980
**Next Releases:**
17081

171-
- **v4.5 (Q2 2025)** - Mobile & Desktop Apps
172-
- Native mobile applications (iOS/Android)
173-
- Electron desktop application
174-
- Push notifications and cross-device sync
175-
176-
- **v5.0 (Q4 2025)** - Quantum-Resistant Edition
177-
- CRYSTALS-Kyber post-quantum key exchange
178-
- SPHINCS+ post-quantum signatures
179-
- Hybrid classical + post-quantum schemes
180-
181-
- **v5.5 (Q2 2026)** - Group Communications
182-
- P2P group chats (up to 8 participants)
183-
- Mesh networking topology
184-
- Anonymous group administration
185-
186-
- **v6.0 (2027)** - Decentralized Network
187-
- DHT-based peer discovery
188-
- Built-in onion routing
189-
- Decentralized identity system
190-
191-
---
192-
193-
## 💻 Development
194-
195-
### Project Structure
196-
197-
```
198-
securebit-chat/
199-
├── index.html # Main application
200-
├── manifest.json # PWA manifest
201-
├── sw.js # Service worker
202-
├── src/
203-
│ ├── components/ui/ # React UI components
204-
│ ├── crypto/ # Cryptographic utilities
205-
│ │ └── ASN1Validator.js # ASN.1 DER parser
206-
│ ├── network/ # WebRTC P2P manager
207-
│ ├── notifications/ # Browser notifications
208-
│ ├── transfer/ # File transfer system
209-
│ ├── pwa/ # PWA management
210-
│ └── styles/ # CSS styling
211-
├── logo/ # Icons and logos
212-
└── docs/ # Documentation
213-
```
214-
215-
### Build Workflow
216-
217-
```bash
218-
# CSS changes (Tailwind)
219-
npm run build:css
220-
221-
# JavaScript/JSX changes
222-
npm run build:js
223-
224-
# Full rebuild (recommended)
225-
npm run build
226-
227-
# Development with live server
228-
npm run dev
229-
```
230-
231-
**Important:** Always rebuild after changes. Source files are in `src/`, generated files in `assets/` and `dist/`. Never edit generated files directly.
232-
233-
### Technology Stack
234-
- **Frontend:** Pure JavaScript + React (via CDN)
235-
- **PWA:** Service Workers + Cache API + Web App Manifest
236-
- **Cryptography:** Web Crypto API + custom ECDH/ECDSA + ASN.1 parser
237-
- **Network:** WebRTC P2P Data Channels
238-
- **Notifications:** Browser Notifications API + Page Visibility API
239-
- **File Transfer:** Enhanced secure P2P streaming with chunked encryption
240-
- **Styling:** TailwindCSS + custom CSS
241-
242-
---
243-
244-
## 🛡️ Security
245-
246-
### Audit Status
247-
- ✅ Internal cryptographic review completed
248-
- ✅ P2P protocol security analysis completed
249-
- ✅ File transfer security validation completed
250-
- ✅ ASN.1 validation and key verification completed
251-
- 🔄 Professional security audit planned Q3 2025
252-
253-
### Vulnerability Reporting
254-
Contact: **SecureBitChat@proton.me**
255-
256-
See **SECURITY.md** for detailed security policy.
257-
258-
### Security Features
259-
- Perfect Forward Secrecy for messages and files
260-
- Out-of-band verification prevents MITM attacks
261-
- Traffic obfuscation defeats network analysis
262-
- Memory protection with no persistent storage
263-
- Complete ASN.1 key structure validation
264-
- File integrity with SHA-384 hash validation
265-
266-
---
267-
268-
## 📊 Performance
82+
- **v4.5 (Q2 2025)** - Mobile & Desktop Apps
83+
- Native mobile applications (iOS/Android)
84+
- **Tauri v2 desktop clients (Windows/macOS/Linux)**
85+
- Push notifications and cross-device sync
26986

270-
- **Connection setup:** < 3 seconds
271-
- **Message latency:** < 100 ms (P2P direct)
272-
- **File transfer speed:** Up to 5 MB/s
273-
- **Memory usage:** < 50 MB active session
274-
- **PWA install size:** < 2 MB
275-
- **Key validation:** < 10 ms (ASN.1 parsing)
87+
- **v5.0 (Q4 2025)** - Quantum-Resistant Edition
88+
- CRYSTALS-Kyber post-quantum key exchange
89+
- SPHINCS+ post-quantum signatures
90+
- Hybrid classical + post-quantum schemes
27691

27792
---
27893

27994
## 🤝 Contributing
28095

28196
We welcome contributions! Here's how:
28297

283-
1. Fork the repository
284-
2. Create feature branch: `git checkout -b feature/amazing-feature`
285-
3. Commit changes: `git commit -m "Add amazing feature"`
286-
4. Push to branch: `git push origin feature/amazing-feature`
287-
5. Open Pull Request
98+
1. Fork the repository
99+
2. Create feature branch: `git checkout -b feature/amazing-feature`
100+
3. Commit changes: `git commit -m "Add amazing feature"`
101+
4. Push to branch: `git push origin feature/amazing-feature`
102+
5. Open Pull Request
288103

289-
### Contribution Areas
290-
🔐 Cryptography • 🌐 Network • 🔔 Notifications • 📂 File Transfer • 📱 PWA • 🎨 UI/UX • 📚 Documentation • 🔒 ASN.1 Validation
291-
292-
---
293-
294-
## 📞 Contact & Support
295-
296-
- **Email:** SecureBitChat@proton.me
297-
- **GitHub:** Issues & Discussions
298-
- **Security:** SecureBitChat@proton.me
299-
300-
---
301-
302-
## ⚠️ Important Disclaimers
303-
304-
### Security Notice
305-
While SecureBit.chat implements military-grade cryptography, no system is 100% secure. Always verify security codes out-of-band and keep devices updated.
306-
307-
### Legal Notice
308-
This software is provided "as is" for educational and research purposes. Users are responsible for compliance with local laws regarding cryptographic software and private communications.
309-
310-
### Privacy Statement
311-
SecureBit.chat collects zero data, stores nothing, requires no registration, and uses no servers. All data exists only in browser memory with direct P2P connections.
312-
313-
---
314-
315-
## 📄 License
316-
317-
MIT License - see **LICENSE** file for details.
318-
319-
100% open source with full transparency, no telemetry, and zero data collection.
104+
If you support the mission — **please star the repo!**
105+
[⭐ Star SecureBit.chat on GitHub](https://github.com/SecureBitChat/securebit-chat)
320106

321107
---
322108

@@ -334,4 +120,4 @@ MIT License - see **LICENSE** file for details.
334120

335121
[🚀 Try Now](https://securebitchat.github.io/securebit-chat/)[⭐ Star on GitHub](https://github.com/SecureBitChat/securebit-chat)
336122

337-
</div>
123+
</div>

0 commit comments

Comments
 (0)