An honest view of what works today, what's being built, and what's ahead. We tag a release only when the claim has been tested on real devices.
PHANTOM is in active Alpha 2, Android. This page reflects the real state of the code — not a marketing wishlist. Features are labelled by what actually works.
Double Ratchet over libsodium, ED25519 identity keys, X3DH session setup.
Every message and read receipt hides the sender from the relay.
Works across Direct WSS, REALITY and REST fallback, with idempotent delivery. Reliability has been measured only in founder-run field tests.
VLESS+REALITY field-tested against Russia's TSPU on specific networks and dates. This does not establish universal resistance to filtering.
Encrypted media upload with chunked delivery.
Mutual ED25519 fingerprint check, with QR exchange.
Rust relay live in Helsinki, with Tor onion + WebTunnel bridge.
Multiple P1 cryptographic findings resolved: prekey wrap, ratchet state wrap, signed-challenge authentication.
Session-repair, chat-list lifecycle, reconnect reliability on hostile OEMs.
Core group messaging through Double Ratchet + Sealed Sender. Hardening pending.
Experimental today; reliability work for restrictive mobile networks.
Shared core is iOS-ready — the remaining work is the native Swift shell.
Photos and files via an encrypted media store.
Runtime transport selection and multi-server fan-out.
Discoverable usernames via the relay namespace.
Peer-to-peer transport without infrastructure. Research stage.
The shared core was deliberately built for cross-platform reuse — one Double Ratchet, one storage schema, one transport layer. That means the iOS port is largely a matter of building the native Swift shell on top of a core that already works, rather than rewriting the cryptography. It's a priority for the next stage of development — and the kind of milestone your support helps reach sooner.