Roadmap

Roadmap

What is already working, what we are stabilizing and what is still in the plans.

Crypto core, calls and messenger
March 2026
Released
  • Essenger Protocol: hybrid - ephemeral X25519 + ML-KEM-768 to recipient static key → HKDF-SHA256
  • Post-quantum encryption ML-KEM-768 on iOS and Web; Argon2id instead of PBKDF2
  • 1-on-1 audio and video calls (WebRTC + TURN/STUN, CallKit/PushKit)
  • Sender Authentication (HMAC-SHA256), TOFU by immutable user UUID, Key Transparency Audit Log
  • Disappearing and voice messages, reactions, replies, forwarding, editing
  • 2FA (TOTP + backup codes), BIP39 recovery phrase, certificate pinning on iOS
  • Internal audit and bug-hunt, landing; Essenger Protocol name fixed
Push notifications, TestFlight and backups
April 2026
Released
  • Push notifications and background calls: APNs + VoIP (PushKit)
  • iOS Build Pipeline: fastlane + TestFlight + GitHub Actions
  • Apple Privacy Manifesto, Bundle ID migration to org.essenger.ios
  • Offsite server backups: encryption + Backblaze B2, monitoring via Healthchecks
Post-quantum parity and first beta
May 2026
Released
  • Full post-quantum parity Web ↔ iOS: ML-KEM-768 in both directions
  • Client-side encrypted private key backup built into login and recovery
  • Golden vectors and cross-platform harness (single crypto format)
  • E2E encryption of group attachments, open registration (login + password)
  • Server-side E2E enforcement (server does not store plaintext), reliable delivery (✓/✓✓, offline retransmission)
  • Comprehensive bug-hunt for authentication and delivery; first public beta
Liquid Glass and Double Ratchet
June 2026
Released
  • Secret chats: a separate conversation using X3DH + Double Ratchet, with forward secrecy and post-compromise security
  • Portable ratchet history and cross-platform compatibility (web ↔ iOS), session establishment based on device capabilities
  • Forward secrecy foundation: golden-vectors, independent node-oracle, canonical KDF specification, rollback protection and session-reset
  • Complete redesign of Liquid Glass: chat list, chat, settings, live theme builder
  • Calls are delivered to workers on real devices; account-signed device list
  • Pre-beta QA campaign and edits based on the results
Crypto core and secret chats work; independent external audit is yet to come
Voice, light theme, release candidate
July 2026 · now
In progress
  • Voice messages: real waveform, live recording level, speed ×2
  • Secret and one-time messages reach any recipient: publishing an X3DH set at each input and self-healing of devices
  • Cross-platform access recovery: login migration, self-healing, phrase transfer when changing password
  • Light theme and theme builder for custom accent; debugging of Liquid Glass (calls, fonts, restoration)
  • Avatars under authorization, clearing decrypted data upon exit and blocking
  • Elimination of delays and roughness: opening a chat, viewing pictures, smooth lists
  • Build a release candidate in TestFlight
Public release
Launch
  • Open source clients (GPLv3)
  • Publication of the protocol specification
  • Reproducible builds
  • Independent third party audit
  • App Store + Google Play
  • Self-hosting documentation
Platforms and communication
Planned
  • Android client (React Native / Expo)
  • Multi-device: linked devices with secure key synchronization
  • Group calls (multi-party WebRTC) + screen sharing
  • Encrypted cloud backup of history - only you have the key
  • Threads in groups, polls, stories/statuses
  • Stickers and GIFs
Channels and communities
Planned
  • Public channels: posts, subscribers, reactions and comments
  • The public name of the author is separate from the personal account - run a channel without revealing yourself
  • Invitations via link and QR, administrator roles
  • Folders and pinned chats - order with dozens of dialogues
  • Audio rooms in channels (live broadcasts)
Wallet and height
Research
  • Built-in crypto wallet: self-custody, keys on the device - the same philosophy as correspondence
  • Transfers directly in chat, between people, without an intermediary
  • Referral system: invite - get rewards
  • Donations and paid subscriptions for channel authors
  • Premium subscription instead of advertising: we don't sell attention or data
Next level privacy
Research
  • Group Double Ratchet (sender keys / MLS) — forward secrecy for group conversations
  • Server-blind Sealed Sender on the active path - the server does not see the sender
  • Anti-censorship: built-in proxies and onion access
  • Passkeys and hardware keys for entry
  • Bug bounty and regular transparency report
  • Bot/Integration Platform - With Same Encryption Guarantees