Security Architecture & Encryption
Synco is engineered with a strict zero-trust model: no external relays, no cloud storage, and end-to-end authenticated cryptographic encryption over your local LAN or Bluetooth connection.
1. Zero-Trust Local Pairing
When you initiate a connection between your Android phone and desktop, Synco generates a high-entropy one-time PIN on the desktop terminal. Pairing requires manual entry of this PIN on your Android phone, creating an authenticated local trust relationship.
2. Ephemeral Curve25519 & AES-256-GCM
Key exchange is executed using Curve25519 (X25519 ECDH). Once mutual keys are derived, all packet payloads (notifications, call events, media commands) are encrypted with AES-256-GCM cipher with unique nonces. Session keys are ephemeral and wiped from memory upon disconnect.
3. Local Sub-Millisecond Profiles
By removing internet network hops, Synco achieves direct point-to-point socket latency profiles:
- Direct Hotspot: <0.4ms latency
- Local Wi-Fi LAN: ~0.8ms latency
- Bluetooth LE: ~1.2ms ultra-low power latency
4. Absolute LAN Air-gapping
If your internet connection drops or if your router is disconnected from the WAN entirely, Synco continues to function at 100% capacity over local Wi-Fi or Bluetooth. Zero cloud dependencies ensure uninterrupted device continuity.
Cryptographic Primitive Audit Checklist
| Layer | Primitive / Standard | Purpose |
|---|---|---|
| Key Exchange | Curve25519 (X25519 ECDH) | Mutual key agreement over untrusted LAN |
| Payload Cipher | AES-256-GCM | Authenticated stream encryption with nonces |
| Authentication | One-Time PIN + HMAC-SHA256 | Peer verification & MITM prevention |
| Transport Layer | TCP Direct Sockets / GATT BLE | Local network and low-power bluetooth transport |