NIDO alpha ships serverless P2P AI messenger with post-quantum crypto and formally verified handshake
NIDO_007 · reddit · 2026-10-23
NIDO 0.1.52-alpha is a private AI assistant and messenger that runs 100% on-device with no accounts, cloud, or internet — two devices talk directly over Bluetooth or local Wi-Fi.
Security highlights of this release:
- Formally verified handshake: protocol modeled in ProVerif (the tool used for Signal/TLS analysis), which found a real unknown-key-share flaw — now fixed, with proofs run on every change.
- Post-quantum by default: per-message keys via Double Ratchet mixed with ML-KEM-768, using mlkem-native (the implementation behind AWS-LC and Open Quantum Safe).
- Encrypted message headers and sealed initial messages — even message counters and ratchet keys are hidden, which Signal doesn't do.
- Reproducible builds: two independent builds match byte for byte.
- Cross-checked against public audits of Threema, Signal's PQXDH, Briar, and Matrix; fixed two applicable findings, plus three more from independent review.
Also includes disappearing messages, a panic wipe button, incognito keyboard, screenshot blocking, and a fingerprint-gated hardware vault. The author candidly notes it's an unaudited alpha.
More from Safety
- NSA urges PHP sites offline as 14-year-old bug is found with a five-word AI prompt — nicolechirps · 2026-10-23
- Anthropic uses Claude to formally verify software security properties at scale — cedric_chee · 2026-10-23
- ~65% odds the AI-cyberattack worriers are right: K3 looks like a different level — NathanpmYoung · 2026-10-23
- Abliterated GLM-5.3 open-weight model released with 2x cyber exploitation capability — AaronBergman18 · 2026-10-23
- OMG Cable looks like a normal charger but can remotely take over your PC — manishkhosiya · 2026-10-23
- Solo.io Open-Sources AgentShield: Assume Every Attacker Is an Agent — pjausovec · 2026-10-23