End-to-End Encrypted, Peer-to-Peer First

GSTNet uses AES-256-GCM encryption to protect communication content, combined with a peer-to-peer-first architecture: direct device-to-device connectivity is preferred whenever network conditions allow.

Get Your GST-ID Free
Security Stack — Bottom to Top
1

Physical Transport

WebRTC P2P — direct device-to-device

P2P
2

Key Exchange

X25519 — elliptic-curve key agreement (iPhone, iPad and Windows)

ECDH
3

Encryption

AES-256-GCM — 256-bit authenticated encryption

AES-256
4

Forward Secrecy

Message keys change as you chat — other messages stay protected

PFS
5

Identity

GST-ID — account identifier, Supabase-backed, RLS-protected

AUTH
6

Content Protection

Global Space Technology cannot decrypt protected message content

E2E

Security Specifications

Encryption

AlgorithmAES-256-GCM
Key Size256 bits
IV Size96 bits
Auth Tag128 bits
StandardNIST FIPS 197

Key Exchange

iPhone / iPadX25519
WindowsX25519
SignaturesEd25519
Forward Secrecy✓ Ratchet
StandardsRFC 7748 / 8032

Transport

ProtocolWebRTC
DTLS1.2 / 1.3
SRTPAES-128-CM
ICERFC 8445
STUN/TURNRFC 5389

Why WebRTC Changes Everything

WebRTC (Web Real-Time Communication) is an open standard that enables direct peer-to-peer communication between devices, minimizing reliance on a central server to relay data.

When two GSTNet users start a call, GSTNet tries to set up a direct encrypted channel between their devices. Our servers help the devices find each other (signaling); when a direct connection is not possible, an encrypted relay carries the call. Messages and files are delivered through our servers in encrypted form.

Regardless of the connection path, Global Space Technology does not possess the cryptographic keys required to decrypt protected communication content.

🔑

Changing Keys

Message keys change as you exchange messages. Private keys stay on your device, protected by its secure storage.

🌊

Forward Secrecy

If one message key were ever exposed, other messages stay protected.

📡

ICE/STUN/TURN

Industry-standard protocols ensure connectivity even behind firewalls and NAT configurations worldwide.

🔒

DTLS-SRTP

All WebRTC streams are protected by DTLS handshake and SRTP encryption — double-layered security for calls.

Next Generation Protocols

🛰️

Satellite Communication

Our Phase 4 roadmap includes satellite network integration, to communicate from places without ground-based internet.

📻

RF Mesh Network

Radio frequency communication for battlefield and disaster scenarios. Devices form self-healing mesh networks with no dependency on existing infrastructure.

🔮

Quantum-Ready Encryption

Post-quantum cryptography integration planned to ensure communications remain secure against future quantum computing attacks.

Does GSTNet Use Servers?

Yes. GSTNet uses servers for accounts, sign-in, abuse prevention, access management, delivering encrypted messages and files, and connecting calls. Calls use direct device-to-device connections whenever possible.

The important distinction: backend infrastructure does not mean Global Space Technology possesses the cryptographic keys required to decrypt protected end-to-end encrypted communication content. That protection comes from the encryption itself, not from an absence of servers.

Experience End-to-End Encrypted Communication

90 days of introductory access. No technical knowledge required.