Enter New Level of Privacy with convro
Convro secure Messenger (build on C6P) offers full E2E Encryption, no personal data storing along with the best in game metadata minimalisation practices, and top tier account wipe policy
Security Guarantees
C6P provides mathematically proven security properties. Every guarantee is formally specified, implemented, and audit-ready.
Forward Secrecy & Crypto
How C6P ensures that compromising current cryptographic state cannot reveal past messages through per-message key derivation, symmetric ratcheting, and production-grade AEAD.
Read →IslandAccord Handshake
How C6P establishes authenticated sessions through IslandAccord handshake and derives hierarchical keys for perfect forward secrecy.
Read →Metadata Minimization & AAD Shield
How C6P achieves best-in-class metadata privacy through sealed sender, fixed-size padding, and cryptographic binding that crushes the competition.
Read →Virtual Numbers & Multi-Device
How Convro"s +99 virtual number system provides privacy-first identity while supporting seamless multi-device messaging with independent cryptographic keys.
Read →Production Ready
109/109 tests passing, zero warnings, comprehensive docs. Rust reference implementation ready for external audit.
GitHub Repository →Open Source
Complete reference implementation in Rust. Dual licensed Apache 2.0 / MIT.
GitHub Repository →Production Ready
See for yourself. Live CI/CD status from GitHub Actions.
Security Analysis
15 threat scenarios analyzed with mitigations and residual risk assessment.
Threat #1: Man-in-the-Middle Attack
Mitigation: SPK signatures + Key Confirmation (KC1/KC2)
Threat #6: Server Rotation Attack
Mitigation: OTP consumed immediately, cryptographic binding
Threat #10: Race Condition
Mitigation: Atomic state transitions, fail-closed design
Threat #13: Message Injection
Mitigation: AEAD authentication, session binding in AAD
Frequently Asked Questions
Yes. The Rust reference implementation is complete with 109/109 tests passing, zero clippy warnings, and comprehensive documentation. The protocol is ready for external cryptographic audit.
C6P uses deterministic nonces (no RNG dependency), symmetric ratcheting only (simpler state), and a different handshake (IslandAccord v1 with 3DH+OTP). Both provide forward secrecy and replay resistance.
Currently: Rust (production-ready). Planned: Swift (iOS), Kotlin (Android), desktop/web. All implementations must pass identical test vectors.
Not yet. The protocol is audit-ready with comprehensive threat models, test vectors, and documentation. External cryptographic audit is planned.
Yes. C6P is dual-licensed under Apache 2.0 / MIT. Choose whichever license works best for your use case.
Email killthebug@convro.eu (do not open public issues). We aim to respond within 48 hours.
Ready to Build Secure Applications?
Start implementing C6P today. Complete documentation, test vectors, and reference implementation available.