Show HN: Iriszip – Audited post-quantum E2EE file transfer (SPAKE2M-KEM-768)

Category: security

Tags: e2ee, post-quantum, file-transfer, pake, webrtc, self-hosted

Score: 6.3/10 (Innovation: 5, Technical: 7, Documentation: 8, Utility: 5)

Iriszip is a browser-to-browser end-to-end encrypted file and text transfer tool that requires no accounts or app installs, using a SPAKE2 PAKE combined with X25519 and ML-KEM-768 for post-quantum hybrid key exchange. It is notable for its explicit threat model, independent cryptographic review of the protocol design, transcript binding, directional traffic keys, and a fallback relay architecture with honest labeling of relayed lanes.

Target audience: privacy-conscious users, security engineers, backend/full-stack developers, self-hosters

Repository: https://github.com/iris-zip/iris · JavaScript · NOASSERTION

View on Hacker News