The Spojiti blog

What we build and why, in public. No tracking on this page either.

More posts

Every post, in full

Positioning

Spojiti knows no one. That's the whole point.

7 Sep 20261 min readThe Spojiti team

Most messengers you have used know who you are. They have your phone number, and through it your country, your carrier, often your contacts and a graph of everyone you have ever written to. Encryption protects the words; it does nothing for the fact that the words were exchanged, by whom, and when. That fact is worth money to many of those companies, and it is the record they can be compelled to hand over.

Spojiti starts from the other end. There is no phone number, no e-mail, no name and no sign-up: your account is a random id. Your identity is a key your phone derives from twelve words you keep. Our relay routes sealed envelopes between random ids and deletes them on delivery. When a court asks us who you are, the honest answer is a random account id and the little our relay keeps beside it; your name, number and e-mail are not on our systems, because we built it that way.

That is not a policy. Policies change with owners, with laws, with pressure. It is a construction, and it is published, in the white paper, in the protocol reference, and in the source. Read it. Then decide whether "we promise not to look" was ever good enough.

Engineering

Post-quantum, proven on the phone in your hand

7 Sep 20261 min readThe Spojiti team

Claiming post-quantum protection is a paragraph. Proving it is a test that runs on the device before the first message: we run NIST's published known-answer vectors for ML-KEM-768, ML-KEM-1024 and ML-DSA-65 at every launch, and only then let the library near a conversation. The post-quantum page walks through why a silently wrong post-quantum library is worse than none, and how the hybrid handshake, the every-turn ratchet and the hybrid signatures fit together.

Read the post-quantum page →