MILITARY-GRADE SECURITY, WITHOUT COMPROMISE
AEGIS P2P is a sovereign security suite designed for high-risk environments. Post-quantum encryption. ML-KEM-1024 (NIST Level 5)Double Ratchet, 3 encrypted network transport (Tor, Wi-Fi Direct, BLE Mesh), execution in locked RAM and active forensic resistance Polymorphic RAM, zero-disk media ingestion, anti-PRNU and EXIF suppression. No central identity. No message server. No silent compromise.
Defense-in-depth architecture
Each layer is designed to reduce the attack surface: bypass, transport, memory, media, integrity.
Argon2id & HKDF Derivation
No email, no SIM card. The keys are derived on the fly in RAM via Argon2id (anti-brute force) and HKDF-SHA256Strict isolation via FFI Rust. StrongBox/TEE checked at each boot, fail-closed.
Post-Quantum NIST Level 5
handshake ML-KEM-1024 mixed with X3DH/ECDH, then Signal Double Ratchet complete. Objective: to withstand classical adversaries and future quantum decryption capabilities.
3 Transport Figures
Tor (Arti) for network anonymity, Wi-Fi Direct for high-speed local exchanges, BLE Mesh For environments without internet access. 512-bit cryptographic padding to blind traffic analysis.
Polymorphic RAM & Zero-Disk
Buffers protected by dynamic XOR masking + dual-rail architecture. Media ingested only in RAM, EXIF data removed, anti-PRNU applied. Kill switch: RAM purge, session keys, and immediate shutdown.
Post-Quantum Encryption & Military Security
Traditional messaging services leave traces that can be exploited by modern forensic tools. AEGIS P2P drastically reduces this attack surface Rust core aegis-corecryptosystem ML-KEM-1024 (NIST Level 5) + Double RatchetNo central server, keys and pointers stored solely in locked RAM. The goal isn't marketing: it's a concrete, tested, and verified defensive architecture, tested in CI/CD.
Your photos and videos are never written in plain text to the storage device. Ingestion occurs exclusively in RAM via aegis_ingest_file_zero_disk()EXIF metadata (geolocation, model, timestamp) is removed. A processing Anti-PRNU It reduces the unique fingerprint of the camera sensor to complicate forensic identification of the device. The display uses an isolated VRAM area (BlindView), with global FLAG_SECURE.
Tor (Arti) It masks the IP address and allows access to .onion services. Wi-Fi Direct offers a fast, encrypted local channel. BLE Mesh Enables communication without the internet, with bounded application flooding (TTL=5, 60-second deduplication). The hybrid mode switches based on availability and security policy.
The kernel dynamically verifies the SHA-256 hash of the official JKS certificate at startup. Updates are cryptographically signed in ed25519 and downloaded via Tor. Any alteration to the manifest or APK will block the installation. The release binary is provided with its hash for local verification.
✓ Post-quantum encryption ML-KEM-1024
✓ NIST Level 5 + Double Ratchet
✓ 3 transports: Tor / Wi-Fi / BLE Mesh
✓ Polymorphic RAM (XOR + dual rail)
✓ Zero-disc media + Anti-PRNU
✓ EXIF Removal + Blind View
✓ StrongBox / TEE fail-closed
✓ Kill switch and hardware triggers
✓ Updater signed ed25519
✓ Official signed ARM64 APK
Active Forensic Resistance
No database contains your messages or keys. Secrets reside in locked RAM. Media is processed in memory, with Anti-PRNU and EXIF suppression. The memory footprint is minimized to complicate logical and hardware extractions.
Kill Switch & Hardware Sensors
Beyond stress codes, the self-destruct protocol can be activated via a Dead Man's Switch or physical anomalies (shocks, SIM card removal). The purge erases RAM, session keys, and media buffers. StrongBox/TEE is checked at each boot.
Official Integrity Guarantee
Complete independence of the blinds. The purchase includes the signed APK and its SHA-256 hash for local verification. Updates are signed ed25519 and verified on the Rust side before installation. No backdoors, no GAFAM telemetry.
Absolute Transparency: Public Source Code
Serious security demands transparency. AEGIS P2P's native cryptographic engine and isolation logic are publicly available and auditable. The architecture must prove, not just promise, its structural inability to access your communications.
Play Protect Alert: Proof of Your Independence
During binary installation, Android (Google Play Protect) may display a security alert indicating an unknown source.
AEGIS P2P is intentionally distributed outside of GAFAM networks to block telemetry and prevent the injection of uncontrolled dependencies. A Play Protect alert is expected. Verification of the SHA-256 hash provided upon delivery guarantees file integrity. Support is available for installation.
Frequently Asked Questions
Why buy the APK if the code is publicly auditable?
The code is public to guarantee the absence of backdoors. Compiling a hardened Rust/Flutter binary requires a controlled toolchain, signature, and build pipeline. The purchase provides the official signed APK, its SHA-256 hash, lifetime updates, and access to the OpSec manual.
Does the application require Google services (GMS)?
No. AEGIS P2P works without Play Services and is compatible with hardened environments (GrapheneOS, CalyxOS) as well as standard Android. No connection to the Google ecosystem is required for operation.
How is delivery carried out after payment?
After validation, the order is processed manually to ensure separate delivery. You will receive an encrypted download link containing the ARM64 APK, its SHA-256 hash, the OpSec manual, and verification instructions. The Stripe link on the page must be updated with the amount €69,90.
What exactly does forensic resistance cover?
AEGIS does not claim to be resistant to targeted physical coercion or compromised Android firmware. It is designed to reduce the attack surface against network adversaries, malware, passive forensic leaks, and mass surveillance: polymorphic RAM, zero-disk media, Anti-PRNU, EXIF suppression, Kill Switch, StrongBox/TEE, and encrypted transports.
