A Secure Real-Time Messaging System Using End-to-End Encryption and Hybrid Key Exchange

Abstract

VartaRaksha is a live chat application that was created to guarantee confidential and secure communication between the users. Although most of the current chat programs are encrypted, they still tend to use servers in some of their functionality, which may pose a privacy threat. This initiative is aimed at eliminating such a dependency by means of a real End-to-End Encryption (E2EE) solution. When message is sent through this system, it is encrypted in the device of the sender and can be decrypted only by the target receiver. The server is not involved in accessing the actual data being transported, instead it is involved in relaying messages, where information between users in any form stays a secret. The system encrypts messages with AES-256-GCM that does not only secure the confidentiality of the information but also its integrity. The authentication mechanism can be used to detect any changes to the message when transmitting it. In order to achieve a secure connection between the users, they utilize Elliptic Curve Diffie-Hellman (ECDH) to produce a shared secret key and it is not transmitted over the network. Along with existing security measures, the system has been planned in consideration of the future threats. It also has a post-quantum cryptography solution based on Kyber to address any threats posed by quantum computing. This hybrid approach enhances the overall system security and increases the resilience of the system in the long run. VartaRaksha is, thus, a trustworthy, safe, and progressive remedy to the digital communication in the present day.