A cryptographically secure, end-to-end encrypted terminal chat application.

• End-to-End Encryption: All messages encrypted with Ed25519 signatures and XChaCha20-Poly1305
• Zero-Knowledge: Server never sees message content — only encrypted payloads
• 2FA Support: TOTP-based two-factor authentication
• Terminal-First: Built with Ink (React) for a reactive, modern CLI experience
• Real-Time: Server-Sent Events (SSE) for instant message delivery
• Cross-Platform: Linux, macOS, and Windows binaries via GitHub Releases

curl -sSL https://raw.githubusercontent.com/LyeZinho/vox/main/install.sh | bash

irm https://raw.githubusercontent.com/LyeZinho/vox/main/install.ps1 | iex

# Install specific version
curl -sSL https://raw.githubusercontent.com/LyeZinho/vox/main/install.sh | bash -s 1.0.0

# Install latest pre-release (dev build)
curl -sSL https://raw.githubusercontent.com/LyeZinho/vox/ink-migration/install.sh | bash

VAX_SERVER=https://your-server.com vax
# or
export VAX_SERVER=https://your-server.com
vax

Default server: https://vox.devscafe.org

• Node.js 22+
• Rust (for building the crypto core)
• Docker & Docker Compose (for server)

git clone https://github.com/LyeZinho/vox.git
cd vox
npm install

# Build the Rust crypto core
npm run build:core

# Start the backend
docker-compose up -d

# Start the server
npm run dev:server

# Start the terminal client
npm run dev:client

┌─────────────────────────────────────────────────────┐
│                   Terminal Client                    │
│  ┌─────────────┐  ┌──────────────┐  ┌────────────┐  │
│  │   TUI       │  │   State     │  │   Rust     │  │
│  │  (Ink)     │◄─┤   (Store)  │◄─┤   Core     │  │
│  │  React     │  │  useReducer │  │  (crypto) │  │
│  └─────────────┘  └──────────────┘  └────────────┘  │
└─────────────────────────────────────────────────────┘
                          │
                    HTTPS + SSE
                          │
┌─────────────────────────────────────────────────────┐
│                   Relay Server                       │
│  ┌─────────────┐  ┌──────────────┐  ┌────────────┐  │
│  │   NestJS    │  │   Redis     │  │  Postgres  │  │
│  │   API       │◄─┤   Pub/Sub   │  │  Database  │  │
│  └─────────────┘  └──────────────┘  └────────────┘  │
└─────────────────────────────────────────────────────┘

1. First Launch: Enter email and password to create your vault
2. Subsequent Launches: Enter password to unlock your private key
3. Send Messages: Type in the input bar and press Enter
4. Commands: Type /help to see all available commands

• Key Derivation: Argon2id (memory-hard KDF)
• Identity: Ed25519 (Curve25519 elliptic curve)
• Vault Encryption: XChaCha20-Poly1305 (AEAD)
• Message Signing: Ed25519 signatures

1. User generates Ed25519 keypair locally
2. Private key encrypted with Argon2id-derived master key
3. Only the public key is ever transmitted to the server
4. Messages are signed before encryption

See .env.example for a full configuration template.

MIT License — see LICENSE file