Messaging built for privacy, by design
Secure messages between you and the people you trust. No accounts, no servers storing your data.
Download Bus
The desktop app for Kamune. Available for macOS, Linux, and Windows.
Get started in minutes
Install and run Kamune in your project.
Core Library
Add Kamune to your Go project
Relay Server
Run via container or binary
Security features that protect you today and tomorrow
Every layer of Kamune is designed to keep your conversations private and safe.
Post-Quantum Security
Future-proof encryption that protects your messages even against quantum computers.
End-to-End Encrypted
Only you and the person you're talking to can read your messages. No one in between.
Peer-to-Peer
Messages go directly between devices. No central server stores your conversations or who you talk to.
Multi-Transport
Works over multiple network types — TCP, UDP, WebSocket, or TLS. Pick what works for your setup.
Forward Secrecy
Each conversation uses its own unique keys. Even if one key is compromised, past and future messages stay safe.
Open Source
Fully open source. Anyone can verify the code does what it claims.
Built on proven cryptography
A hybrid cipher suite combining classical and post-quantum algorithms for defense in depth.
Verifies who you're talking to
Creates shared secret resistant to quantum attacks
Turns shared secret into unique session keys
Encrypts every message with integrity protection
How it works
Three steps to establish a secure, authenticated channel between two peers.
Exchange
HPKE establishes an encrypted tunnel using hybrid ML-KEM-768-X25519 key agreement.
Handshake
Post-quantum ML-KEM-768 key exchange with mutual challenge-response verification.
Communication
Signed, encrypted, and sequenced message frames with replay protection and traffic analysis resistance.
Everything you need, from library to app
A complete toolkit for secure communication, from library to desktop app.
Core Library
The heart of Kamune — handles encryption, connections, and message storage.
Relay Server
Helps devices connect when they can't reach each other directly. Never sees who's talking or what they say.
Bus (GUI)
Desktop app for chatting with full security. Manage sessions, verify peers, and view encrypted history.
TUI Client
Chat from your terminal. Connect directly or through a relay, with emoji verification and chat history.
Daemon
Integrate Kamune into other apps — Tauri, Electron, editor plugins, or your own scripts.
A relay that sees nothing
Helps devices connect when they can't reach each other directly. It never reads your messages or stores your data.
Blind
Never sees public keys, identities, or message content.
Stateless
No persistent storage, no queues, no offline messages.
Zero Metadata
No social graph, no presence tracking, no persistent identifiers.
Transport-Agnostic
Same protocol over WebSocket, raw TCP, or TLS.
UDP Hole Punching
Optional broker that helps peers discover addresses and punch through NAT — no relay needed for the data path.
Transport Comparison
| Transport | DPI Evasion | Best For |
|---|---|---|
| WebSocket | Weak | Development, CDN-fronted |
| WSS (WebSocket + TLS) | Excellent | Production, CDN-fronted |
| Raw TCP | Minimal | Trusted networks |
| TLS | Excellent | Production, hostile networks |
Defense in depth
Multiple independent security layers protect your communications.
Confidentiality
Every message is encrypted with session-specific keys using ChaCha20-Poly1305X.
Integrity
Protected by three layers: AEAD authentication tag, digital signatures, and sequence numbers.
Authentication
Both parties authenticate each other using Ed25519 digital signatures.
Forward Secrecy
New ML-KEM keys per session ensure past conversations stay private.
Post-Quantum
ML-KEM-768 key exchange resists quantum computer attacks.
Replay Protection
Sequence numbers detect and reject duplicate messages.
Traffic Analysis Resistance
Random padding makes encrypted traffic harder to analyze.