OMEGA·KEY — encrypted messaging, in a single file.
End-to-end encryption: pronounceable French passphrases, AES-GCM-256, Double Ratchet (forward secrecy + post-compromise recovery), and a copy-paste-free chat over a minimal relay. No dependencies, no mandatory proprietary server — one HTML file that works offline.
⚠️ Experimental, unaudited project. For truly critical secrets, use an audited tool (Signal). Here everything is honest and verifiable: standard WebCrypto, CI tests, reservations documented in black and white.
The idea
OMEGA·KEY is the applied offshoot of the OMEGA-Ω cognitive engine. OMEGA supplies the identity and the entropy — the shared semantic space, the pronounceable passphrases; all the cryptography rests on the browser's standard WebCrypto, no home-made algorithm. The leap: moving from a purely "algorithmic" key to a key anchored in a shared cognitive language.
How it works — 3 steps
1 · A shared key
Both sides enter the same passphrase (+ the same salt). PBKDF2-SHA256, 310,000 iterations, derives the same AES-256 key on both sides — without ever transmitting it. A verifiable fingerprint on each side.
2 · You chat
A thread of bubbles, end-to-end encrypted. Without a link, the ciphertext copies itself (send it over any channel). With the relay, messages flow automatically.
3 · It self-protects
Double Ratchet (ECDH P-256): every message renews the key → forward secrecy (the past stays safe if a key leaks) + post-compromise recovery (self-healing). A security number is compared out-of-band against an interceptor.
What's inside
- Pronounceable French passphrases — real words (12 bits/word) or phonotactic pseudo-words, exact entropy with no modulo bias, drawn from true WebCrypto randomness. The phrase is the key.
- AES-GCM-256 — authenticated encryption: confidentiality + integrity (GCM tag).
- DH Double Ratchet — ECDH P-256, forward secrecy + post-compromise recovery, anti-MITM security number.
- Minimal relay (Deno Deploy, free, ~2 min) — an ephemeral transport that never sees the plaintext, only the ciphertext.
- Encrypted history at rest — AES-GCM, key derived from the passphrase; local resume on reload.
Honesty — security, no bluff
Protected: the content is E2E encrypted (AES-GCM-256 + DH Ratchet → forward secrecy + post-compromise recovery), integrity via the GCM tag. The relay never sees the plaintext.
Stated reservations: the relay sees metadata (room, timing, sizes) → self-host it; the room code is an address, not a secret; the passphrase must travel over a separate secure channel; the security number is compared out-of-band against a MITM; unaudited project — for anything essential, Signal.
Details : omega-key/docs/RAPPORT_MODE_EMPLOI.html · docs/MEMOIRE_TECHNIQUE.md (in French). Crypto tested in CI (test_crypto.js, 37 assertions : entropy, AES-GCM round-trip, Double Ratchet KAT, security number).