Version 1.0 · September 2026 · CognitionX Logic India Pvt Limited. The full technical description of Spojiti: identity without identifiers, the post-quantum session protocol, sealed media, anonymous entitlements, Echoes, the infrastructure, the threat model and what our servers can and cannot see.
Download the PDF 42 pages · SHA-256 printed on the last page
Spojiti is an end-to-end encrypted messenger designed around a single constraint: the service must be unable to identify its users. There is no phone number, e-mail address or name anywhere in the system; an identity is an Ed25519 key pair derived on the device from a twelve-word recovery phrase. Sessions are established with X3DH extended by ML-KEM-1024 and authenticated with ML-DSA-65 beside Ed25519, and evolved with a Double Ratchet that folds a fresh ML-KEM-768 secret into every ratchet step. Media is sealed per item under AES-256-GCM. Paid features are unlocked with RSA blind-signature tokens the server cannot link to a purchase. Public communities ("Echoes") run on per-community pseudonyms behind blind attunement tokens, on an isolated box that holds no account data. This paper describes each construction, the infrastructure that carries them, and the residual metadata — what the relay necessarily learns — with the mitigations for each item.
The recovery phrase, the key tree, contact pairing by QR and by handle, safety numbers, and why an account cannot be recovered by us.
X3DH with an ML-KEM-1024 leg, hybrid ML-DSA-65 + Ed25519 bundle signatures, the Double Ratchet, the ML-KEM-768 ratchet on every step, per-device sessions, replay defences and the on-device known-answer tests.
Sealed blobs, view-once, ephemeral decryption for playback, WebRTC calls with DTLS-SRTP over our own TURN and STUN, and what the media store holds (ciphertext, expiring).
RSABSSA blind signatures: how a Pro purchase becomes a token the relay accepts without knowing who bought it; web and store rails.
Private Echoes as sealed groups; public Echoes on per-Echo pseudonyms with blind attunement tokens, the isolated Echo box, the review queue, link hygiene, standing and badges, and the operating valves.
Owned, multi-homed hardware, the relay and control plane, TURN with a fallback, content-free push, disaster-recovery boxes and restore drills, backups, and the operations console.
What the relay sees (the recipient’s random routing id, ciphertext in transit, connection times and addresses), what it never sees (who wrote: every envelope is sealed to the recipient and arrives over an anonymous connection, so no sender–recipient pair is ever held), what a compelled disclosure can and cannot produce, and the audit. Independent audit in progress — expected by end of 2026, on track.