What is Endless Waltz?
Endless Waltz is a messenger application that implements a proprietary one-time pad cipher to encrypt each message uniquely. Built on top of traditional TLS, it aims to take advantage of 70 years of advancement in cryptography. In addition, messages are not stored anywhere in any form, preventing retrieval and decryption
Due to the usage of TLS, nature of the cipher, and messages being destroyed after sending, messages sent by users cannot be decrypted by adversaries.
Getting Started
To get started, create an account and download the binary.
Go to DownloadsWhat is a One Time Pad?
One Time Pads are encryption keys harvested from atmospheric randomness. Endless Waltz uses a private encryption source to garuntee uniqueness in each key.
Read more about One Time Pads at WikipediaHow is the One Time Pad kept secure?
Once the key is delivered to a client, it is modified by using a Diffie-Hellman handshake in cooperation with the target client. No component of the Endless Waltz circut or an external listener has knowledge of the final Pad (key) used for encryption. All actions take place over TLS encrypted connections
Read more about the Diffie-Hellman handshake at WikipediaHow are the final messages kept secure?
Obviously, the final messages are plaintext, and only as secure as the endpoints the messenger application is run on.
The Endless Waltz messenger does not save anything, nor do the intermediary servers. And they never will.
In order to garuntee that an adversary cannot plant malware on your endpoint, we reccomend using the live media provided as a download on this site.
Go to DownloadsDoes Endless Waltz store anything?
All that is stored is what is required for operation: this includes user account data (email, username, password, signup time, and date). Pads are removed immediately after use and regenerated. The exchange servers only maintain a current list of active users.
Read more about Endless Waltz's privacy posture