Engineering
Built by cryptographers, designed to withstand adversaries.
A look under the hood at the cryptographic primitives, edge AI, and hardware attestation that make CloakLoc uniquely defensible.
System architecture
Five layers, zero trust assumptions.
Compromise of any single layer does not compromise your privacy. Defense in depth, from hardware to network.
Layer 01
Application Layer
Hardened mobile app with minimal attack surface
────────▶
Layer 02
On-Device Intelligence
Edge AI, mobility synthesis, anomaly detection — all on your handset
────────▶
Layer 03
Crypto Core (Rust)
Memory-safe primitives, hardware-bound keys, post-quantum hybrid
────────▶
Layer 04
Attestation & Provenance
TPM, Secure Enclave, device integrity verification
────────▶
Layer 05
Privacy Relay Network
Multi-hop VPN, Tor bridges, zero-log anonymous relay infrastructure
────────▶
The stack
No black boxes. No magic.
Every component is documented and purpose-built for privacy.
Cryptography
- Noise ProtocolTransport layer encryption
- Noise FrameworkTransport encryption
- Ed25519 / X25519Key exchange & signing
- ChaCha20-Poly1305Authenticated encryption
- BLAKE3Hashing & KDF
- Kyber-1024 (PQC)Post-quantum hybrid
On-Device AI
- TFLite MicroEdge inference runtime
- Gemma 3-nanoBehavioral synthesis
- Anomaly DetectorCustom CNN, 4.2MB
- Forensic Probe NetAdversarial classifier
- Path GeneratorLSTM mobility model
- NPU AccelerationQualcomm / Apple Neural
Infrastructure
- WireGuardVPN data plane
- Tor BridgesStealth routing layer
- Nostr RelaysDecentralized signaling
- Encrypted Relay VMsAMD SEV-SNP & Intel TDX
- Zero-Trust MeshmTLS everywhere
- Distroless ImagesMinimal attack surface
Hardware
- Android StrongBoxHardware-backed keys
- Secure Enclave (iOS)Key isolation
- TPM 2.0 AttestationBoot integrity
- YubiKey 5 / Solo 2External 2FA
- GrapheneOS CompatiblePixel target
- Geofence EngineOn-device alert triggers
Codebase
- Rust (core)Memory-safe primitives
- Kotlin / SwiftNative UI layers
- TypeScriptAdmin dashboard
- On-device onlyNo server-side processing
- Minimal dependenciesReduced attack surface