Trust & Security
Curve25519: why it matters.
Modern elliptic curve
Curve25519 is a state-of-the-art ECC curve designed by Daniel J. Bernstein. It's fast, side-channel resistant, and powers Signal, WireGuard, and TLS 1.3.
Sealed-box encryption
We use X25519 key exchange combined with XSalsa20-Poly1305 (libsodium sealed boxes) to encrypt every photo, calculation, and report client-side before upload.
Zero plaintext on servers
Our servers never see your sensitive cargo or vessel data unencrypted. Only authenticated case parties hold the private keys to decrypt.
Vendor-side guarantee
Even if our database were breached, attackers would see only ciphertext. Keys are derived per-case and per-party — never reused across cases.
How it flows
- 1. On case creation, your browser generates an X25519 keypair. The private key never leaves your device.
- 2. Each photo or report is encrypted with a fresh ephemeral key (sealed box) before upload.
- 3. Authorized parties added to the case receive a re-wrapped key derived from their public key.
- 4. Decryption only happens in your browser — our infrastructure handles ciphertext exclusively.