Teleport a folder and nobody in the middle sees what's in it
When you teleport a folder with KEIBIDROP, anyone in the middle sees two devices exchanging encrypted data, and that's all. File names, contents, the folder layout and the size of each file stay inside the encryption.
Only the parts someone opens move, so even the amount of data shows how much was opened, and says nothing about how big your files are. Your internet provider, the Wi-Fi owner and our relay all see the same thing: two devices, when they talk, and how much encrypted data went between them.
Everything travels inside the encryption
Before any file data moves, the two devices agree on keys with a quantum-safe key exchange. After that, everything goes inside the encryption: the list of files, their names and sizes, the folder layout, and every piece of every file. Each piece is sealed so that any change on the way is caught.
Keys: ML-KEM-1024 together with X25519. Data: AES-256-GCM when both machines have hardware AES, ChaCha20-Poly1305 otherwise. Details on the security page.
Teleporting hides the size of what you share
When you send a whole file, the amount of data that moves equals the size of the file, so anyone watching learns that size. When you teleport, the other side opens files in place, and only the parts it reads move, in pieces of up to 16 MB. Share 50 GB and open a 300 MB clip, and a watcher sees about 300 MB of encrypted data. It can't tell whether you shared 1 GB or 1 TB, or which file the clip came from.
Everyone on the path sees encrypted traffic only
| Who | Sees | Never sees |
|---|---|---|
| Your internet provider or the Wi-Fi owner | The other device's IP address, when you're connected, how much encrypted data moved | Names, contents, folder layout, file sizes |
| Our relay, when it's used | The IP addresses of both devices, when they talk, how much encrypted data it passed along | Names, contents, folder layout, file sizes, and the pairing data it holds, which is encrypted too |
| Our servers on a direct connection | Only the encrypted pairing step | Any file data at all |
A cloud upload shows much more
Uploading to the cloud puts the whole file, with its name and exact size, on another company's server. Unless the service encrypts it on your device first, that company can read it. A teleported folder never leaves your computer as a whole, and the pieces that do are encrypted for one device only.
The amount and the timing of the data are visible to anyone on the path. KEIBIDROP does not pad the data, so a watcher can tell roughly how much was opened and when.
Who talks to whom is visible to our relay. If that matters to you, put a VPN or Tor in front of the connection.
Security model · Teleport files: open them without downloading · KeibiDrop for teams · Run it on a NAS · Open one file from a 50 GB folder · Send files without an account · Source code on GitHub