An honest view of what works today, what's being built, and what's ahead. We tag a release only when the claim has been tested on real devices.
PHANTOM is in active Alpha 2, Android. This page reflects the real state of the code — not a marketing wishlist. Features are labelled by what actually works.
Double Ratchet over libsodium, ED25519 identity keys, X3DH session setup.
Every message and read receipt hides the sender from the relay.
Reliable across Direct WSS, REALITY and REST fallback. Idempotent delivery.
VLESS+REALITY validated through Russia's TSPU in production.
Encrypted media upload with chunked delivery.
Mutual ED25519 fingerprint check, with QR exchange.
Rust relay live in Helsinki, with Tor onion + WebTunnel bridge.
Multiple P1 cryptographic findings resolved: prekey wrap, ratchet state wrap, signed-challenge authentication.
Session-repair, chat-list lifecycle, reconnect reliability on hostile OEMs.
Core group messaging through Double Ratchet + Sealed Sender. Hardening pending.
Experimental today; reliability work for restrictive mobile networks.
Shared core is iOS-ready — the remaining work is the native Swift shell.
Photos and files via an encrypted media store.
Runtime transport selection and multi-server fan-out.
Discoverable usernames via the relay namespace.
Peer-to-peer transport without infrastructure. Research stage.
The shared core was deliberately built for cross-platform reuse — one Double Ratchet, one storage schema, one transport layer. That means the iOS port is largely a matter of building the native Swift shell on top of a core that already works, rather than rewriting the cryptography. It's a priority for the next stage of development — and the kind of milestone your support helps reach sooner.