Hufu-P2P Secure Chat

Hufu is the only secure messaging app that gives you no-question-asked complete privacy protection, in combination with the best-in-class message encryption and a simple and intuitive user interface. Unlike the mainstream encrypted messaging applications which demands your private information like your phone number to sign up and use, Hufu encrypted messages pass from your mailbox directly to the recipient's mailbox in the form of encrypted emails, which not just makes it impossible for anyone else to read your conversations, but also leaves absolutely zero amount of your metadata and personal information to us. In fact, we don't even run a server of any form and thus have no means to store any of your data.


__________________________________________

HIGH STRENGTH END- TO-END ENCRYPTION

All messages are encrypted before they leave your phone and not decrypted until they reach the receiver's phone, encryptions are implemented using highly secure and efficient industry-standard algorithms(128 bits AES-GCM for symmetric encryption, and 2048 bits RSA for public key encryption ). Keys are stored locally in an encrypted database, with each page encrypted using a separate key. Additionally, connections to the mail servers are protected with SSL/TLS whenever possible.


__________________________________________

COMPLETE AND PROVABLE PRIVACY PROTECTION

Ciphertexts or plaintexts, all of your data belong to you! Hufu never connects to any server run by us(which can be easily proven by wiretapping your own connection or scrutinizing the code), thus there is no
possibility we collect or store your data without your permission, or violate your privacy in any other way. All private chat messages are deleted from your mailbox 24 hours after they are received/sent.


__________________________________________

MINIMALISTIC DESIGN AND INTUITIVE UI

Completely private chat has never been easier as Hufu makes encrypted messaging a seamless experience in a decentralized environment. The UI is designed under the principle of KISS(keep it simple, stupid), the number of UI elements are kept to a minimum but tuned to improve user's operational security awareness. Setting up is a breeze, all cryptographic processes happen under the hood and are unnoticeable. It should take less than minutes for a user completely new to Hufu to set up his Email account and start using Hufu.


__________________________________________

ROBUSTNESS

Any IMAP-supported mailbox can in theory be used with Hufu, making it nearly impossible to censor all Hufu encrypted messages, and the serverless and open source nature of Hufu allows it to function independent of the status of our business.


__________________________________________

MINIMUM PERMISSIONS

Device & app history

* retrieve running apps

Identity

* find accounts on the device

Photos/Media/Files

* access USB storage filesystem
* modify or delete the contents of your USB storage
* read the contents of your USB storage


__________________________________________

OTHER

* close other apps
* full network access
* view network connections
* control vibration
* use accounts on the device

__________________________________________

Precautions:

1. Avoid using on rooted devices, rooting could potentially allow malicious memory snapshotting/key recording programs to be installed without the user's consent, and breach Hufu's security.

2.If you are using any third-party software to manage your processes, please make sure that Hufu is allowed to run in the background, otherwise the retrieval of your messages may be delayed.

For live support, suggestions, general security inquiries, feature requests, feel free to drop in at https://webchat.freenode.net/?channels=hufu !