RookTalk Private
Download
RookTalk Private is the encryption layer of your private messages. Every message is encrypted with its own key, and that key is deleted once the message is read. The server carries the message, cannot read it, and does not keep it after delivery.
Each message has its own key. The key of a read message is deleted from the device.
Every message has its own key, deleted after the message is read. Even if a device is taken later, earlier messages cannot be opened.
Even if the session data is copied, the thief is locked out once both sides have each sent a message.
The first key agreement includes post-quantum encryption (ML-KEM-1024). Traffic recorded today cannot be opened later with a quantum computer.
A message that is sent again, changed, or shown under someone else's name does not open.
Messages are padded to blocks of 160 bytes, so the length of a short message does not show.
Every device has its own identity key. The secret half never leaves the device; only the public half goes to the server.
With the first message the two devices produce a shared secret. The agreement uses a classical and a post-quantum method together.
A separate key is derived from the shared secret for every message. Each time the other side answers, the keys are renewed from scratch.
The encrypted message waits on the server until the recipient's device has stored it. Then the server's copy is deleted.
When a lawful request arrives, all we can hand over is what we hold. We do not hold message content.
| First key agreement | PQXDH: X25519 + ML-KEM-1024 |
|---|---|
| Message keys | Double Ratchet |
| Identity and signatures | Ed25519 |
| Message cipher | ChaCha20-Poly1305 |
| Key derivation | HKDF-SHA-512, HKDF-SHA-256, HMAC-SHA-256 |
| Padding | To multiples of 160 bytes |
This is the same construction as the handshake Signal published in 2023 and its message protocol.
No. A message is encrypted on your device and opens only on the recipient's device. No secret key goes to the server.
On your device. The server has deleted what it delivered, so a newly set up device starts empty.
Yes, an account can have up to ten devices. Each device has its own key, and a message is encrypted separately for each one. A device you sign out of is removed from the list.
The app remembers your friend's identity key the first time it sees it and warns you if the key changes later. By comparing the safety number shown on both screens you can confirm that nobody is in between.
The construction follows the specifications Signal published, and there is no encryption algorithm of our own. The methods used are listed in the technical summary.
No, this page is about private messages. Private rooms are end-to-end encrypted with the key in the invite code. The details are on the security page.
Private is part of the RookTalk app. There is no separate app to install.