Click the stage to put Eve on the wire
Attack: Bit-Flip
Module-LWE Lattice Field Ready (q = 3329)
1 · Identity
FIPS 204
ML-DSA-87 + Ed25519
Signs every key bundle (4,627-byte signature) so no one can swap in a fake key.
2 · Key exchange
FIPS 203
ML-KEM-1024 + X25519
Agrees a hybrid root secret, then re-runs on the rotation schedule.
3 · Message cipher
16 KB packets
AES-256-GCM + double ratchet
One key per message for text, photos, video and voice. Click a bubble to inspect it.