📡 Protocol Overview
🌐
Matrix Protocol
Decentralized communication with end-to-end encryption across self-hosted homeservers. Federated rooms enable cross-server messaging without centralized control.
Decentralized
E2EE
Self-Hosted
Federated
🔐
Signal Protocol
Double-ratchet algorithm providing perfect forward secrecy. Each message uses unique encryption keys. Supports disappearing messages with configurable timers.
Double Ratchet
PFS
Disappearing
Zero-Knowledge
☁️
Nextcloud Integration
Encrypted file sharing, calendar sync, and contact management — entirely self-hosted within the Nexxus infrastructure. No external cloud dependencies.
File Sharing
Calendar
Contacts
Self-Hosted
📊 Encryption Status Dashboard
0
Messages Encrypted Today
📨 Channel Types
💬
Direct Messages
One-to-one end-to-end encrypted conversations with verified identity keys.
E2EE
👥
Cell Channels
Group encrypted rooms with shared session keys and member verification.
Group E2EE
📢
Broadcast
One-to-many signed channels. Messages are cryptographically signed by the sender.
Signed
📦
Dead Drops
Asynchronous encrypted message exchange. Retrieve messages without real-time presence.
Async E2EE
🚨
Emergency Alert
Priority broadcast with guaranteed delivery and tamper-proof verification.
Priority
🔑 Key Management
🔎 Key Fingerprint Verification
A7F2 9C3E 41D8 B560 E2FA
8B1C D904 3F7A 62E5 C0B8
19D7 4A6F 83C2 5E01 F9B4
6C0E 2D85 A1F3 7B94 E8D6
Algorithm
Ed25519
Created
2026-01-15 02:14 UTC
Status
✅ Verified
🔄 Key Rotation Schedule
Session Keys
Every message
Ratchet Keys
Every 100 msgs
Identity Keys
Every 90 days
Pre-Keys
Weekly
Signed Pre-Keys
Monthly
🛡️ Trust Verification
Device Trust
✅ Verified
Cross-Signing
✅ Active
TOFU Policy
✅ Enforced
Key Backup
⏳ Pending
Recovery Key
✅ Stored
🛡️ Message Security Features
📸
Screenshot Detection
Detects and alerts when a recipient attempts to capture screen content.
Active
🚫
Forward Prevention
Messages cannot be forwarded, copied, or shared outside the conversation.
Enforced
⏱️
Auto-Delete Timers
Messages self-destruct after configurable time intervals on all devices.
Active
🧹
Metadata Stripping
All metadata including timestamps, device info, and location data is stripped.
Enforced
🧅
Onion Routing
Messages routed through multiple encrypted layers via the nx-net pipeline.
Active
🔏
Sealed Sender
Sender identity hidden from the server — only the recipient can decrypt.
Enforced
📋 Recent Activity
--:--:--
OK
Session key ratcheted — channel #cell-alpha
--:--:--
INFO
New pre-key bundle generated (50 one-time keys)
--:--:--
OK
Dead drop message retrieved — slot 0x7A2F
--:--:--
INFO
Cross-signing key verified for device NX-MOBILE-04
--:--:--
WARN
Key backup approaching rotation threshold (87/90 days)
--:--:--
OK
Broadcast message signed and dispatched — 14 recipients
--:--:--
INFO
Onion route established — 3 hops via nx-net relay
--:--:--
OK
Auto-delete completed — 42 expired messages purged
🏗️ Infrastructure Status
🖥️ Homeserver Cluster
Nodes Online
5 / 5
Federation
Active
Synapse Version
v1.98.0-nx
Database
Encrypted
🔀 Relay Network
Active Relays
12
Avg Latency
84ms
Tor Integration
Enabled
Bandwidth
1.2 Gbps
💾 Storage Layer
Encryption
AES-256-GCM
Storage Used
847 GB
Redundancy
3x Replica
Retention
User-defined