👻 Phantom-Net

Where Privacy Meets Technology

---

🔐 End-to-end encrypted • 👁️‍🗨️ Anonymous routing • 🛡️ Zero-knowledge architecture

Your messages. Your privacy. Period.

---

🌟 Overview

Phantom-Net is a cutting-edge secure messaging platform where the server cannot decrypt your messages. Built with military-grade encryption and anonymous onion routing, it ensures that your conversations remain truly private.

┌─────────────────────────────────────────────────────────────────┐
│  "In a world of surveillance, privacy is not a luxury—         │
│   it's a right. Phantom-Net makes that right a reality."       │
└─────────────────────────────────────────────────────────────────┘

---

✨ Features

Feature	Description
👻 Phantom Network	Anonymous onion routing (mixnet) for metadata protection
🔒 Zero-Knowledge	Server cannot decrypt your messages—ever
🌐 Client-Side Crypto	All encryption happens in YOUR browser
🛡️ Military-Grade	RSA-4096 + AES-256-GCM hybrid encryption
🔑 Key Protection	Private keys never leave your device
⚡ Real-Time	Instant secure messaging via WebSocket
🎭 Traffic Resistance	Random delays + fixed-size packets defeat analysis
🎚️ Configurable	Choose Direct (fast) or Anonymous (3-hop) routing

---

🏗️ Architecture

flowchart TB
    subgraph CLIENT ["🖥️ Client Browser"]
        A[React Frontend] --> B[Web Crypto API]
        B --> C[Onion Encryption]
    end
    
    subgraph BACKEND ["⚙️ Backend Server"]
        D[Express Gateway] --> E[Auth Service]
        D --> F[Message Router]
    end
    
    subgraph PHANTOM ["👻 Phantom Network"]
        G[Node A] --> H[Node B]
        H --> I[Node C]
    end
    
    subgraph ORCH ["🎛️ Orchestrator"]
        J[K8s-Lite]
        K[Docker Manager]
        L[Health Monitor]
    end
    
    subgraph STORAGE ["💾 Storage"]
        M[(VedDB)]
    end
    
    CLIENT -->|"🔐 Encrypted"| BACKEND
    BACKEND -->|"📦 Onion Packet"| PHANTOM
    PHANTOM -->|"✅ Delivery"| BACKEND
    PHANTOM <-->|"🔧 Manage"| ORCH
    BACKEND --> STORAGE
    
    style CLIENT fill:#2d3748,stroke:#4fd1c5,color:#fff
    style BACKEND fill:#2d3748,stroke:#f6ad55,color:#fff
    style PHANTOM fill:#1a1a2e,stroke:#a855f7,color:#fff
    style ORCH fill:#2d3748,stroke:#68d391,color:#fff
    style STORAGE fill:#2d3748,stroke:#63b3ed,color:#fff

Loading

---

🧅 Onion Routing Flow

sequenceDiagram
    participant Alice as 👤 Alice
    participant Backend as ⚙️ Backend
    participant NodeA as 🔵 Node A
    participant NodeB as 🟢 Node B
    participant NodeC as 🟣 Node C
    participant Bob as 👤 Bob

    Alice->>Alice: 🔐 Encrypt with Bob's key
    Alice->>Alice: 🧅 Wrap in 3 onion layers
    Alice->>Backend: 📤 Send encrypted packet
    Backend->>NodeA: 📦 Forward to entry node
    
    Note over NodeA: Peel Layer 1 🔓
    NodeA->>NodeB: 📦 Forward encrypted
    
    Note over NodeB: Peel Layer 2 🔓
    NodeB->>NodeC: 📦 Forward encrypted
    
    Note over NodeC: Peel Layer 3 🔓
    NodeC->>Backend: ✅ Deliver to backend
    
    Backend->>Bob: 📬 Notify via WebSocket
    Bob->>Bob: 🔓 Decrypt with private key

Loading

---

🔐 Encryption Layers

graph LR
    subgraph Message ["📝 Original Message"]
        M[Hello Bob!]
    end
    
    subgraph L1 ["Layer 1 - AES-256-GCM"]
        E1[Encrypted Content]
    end
    
    subgraph L2 ["Layer 2 - Node C Key"]
        E2[🟣 Onion Layer]
    end
    
    subgraph L3 ["Layer 3 - Node B Key"]
        E3[🟢 Onion Layer]
    end
    
    subgraph L4 ["Layer 4 - Node A Key"]
        E4[🔵 Onion Layer]
    end
    
    M --> L1 --> L2 --> L3 --> L4
    
    style Message fill:#10b981,stroke:#059669,color:#fff
    style L1 fill:#3b82f6,stroke:#2563eb,color:#fff
    style L2 fill:#8b5cf6,stroke:#7c3aed,color:#fff
    style L3 fill:#22c55e,stroke:#16a34a,color:#fff
    style L4 fill:#3b82f6,stroke:#2563eb,color:#fff

Loading

---

🛠️ Technology Stack

Layer	Technologies
Frontend
Backend
Infrastructure
Storage
Protocols	REST WebSocket Onion Routing Hybrid Encryption

---

🚀 Quick Start

Prerequisites

✓ Node.js v18+
✓ Python 3.10+
✓ Docker Desktop
✓ VedDB Server

Installation

# 1️⃣ Clone the repository
git clone https://github.com/your-username/phantom-net.git
cd phantom-net

# 2️⃣ Install dependencies
cd backend && npm install
cd ../frontend && npm install

# 3️⃣ Start VedDB
cd orch/veddb-server && cargo run --release

# 4️⃣ Start Orchestrator
cd ../k8s-lite && python run-local.py

# 5️⃣ Start Backend
cd ../../backend && npm run dev

# 6️⃣ Start Frontend
cd ../frontend && npm run dev

🌐 Access Points

Service	URL
🖥️ Frontend	http://localhost:5173
⚙️ Backend API	http://localhost:3000
🎛️ Orchestrator	http://localhost:5000
💾 VedDB	127.0.0.1:50051

---

📁 Project Structure

phantom-net/
├── 🎨 frontend/                 # React Application
│   ├── src/
│   │   ├── components/         # UI Components
│   │   │   ├── 💬 messages/    # Chat interface
│   │   │   └── 🔐 auth/        # Authentication
│   │   ├── services/           # Crypto & API
│   │   └── pages/              # Route pages
│   └── vite.config.ts
│
├── ⚙️ backend/                  # Express Server
│   ├── src/
│   │   ├── services/           # Gateway, Encryption
│   │   ├── routes/             # API endpoints
│   │   └── middleware/         # Auth, Rate limiting
│   └── package.json
│
├── 🎛️ orch/                     # Infrastructure
│   ├── k8s-lite/               # Python Orchestrator
│   │   └── control-plane/      # Flask API
│   ├── phantom-node-js/        # Relay Nodes
│   │   ├── server.js           # Node logic
│   │   └── Dockerfile          # Container
│   └── veddb-server/           # Rust Database
│
└── 📖 README.md

---

🔒 Security Deep Dive

Cryptographic Design

graph TD
    subgraph KeyGen ["🔑 Key Generation"]
        A[Generate RSA-4096 Keypair] --> B[Mark Private Non-Extractable]
        B --> C[Store Public on Server]
    end
    
    subgraph Encrypt ["🔐 Message Encryption"]
        D[Generate Random AES-256 Key] --> E[Encrypt Message with AES-GCM]
        E --> F[Encrypt AES Key with RSA-OAEP]
        F --> G[Create Encrypted Bundle]
    end
    
    subgraph Onion ["🧅 Onion Wrapping"]
        H[Get Node Public Keys] --> I[Encrypt for Node C]
        I --> J[Encrypt for Node B]
        J --> K[Encrypt for Node A]
    end
    
    KeyGen --> Encrypt --> Onion
    
    style KeyGen fill:#3b82f6,stroke:#2563eb,color:#fff
    style Encrypt fill:#10b981,stroke:#059669,color:#fff
    style Onion fill:#8b5cf6,stroke:#7c3aed,color:#fff

Loading

Threat Model

✅ Protected Against	❌ Not Protected (MVP)
Server Compromise	Client Malware
Database Leaks	Physical Device Theft
Man-in-the-Middle	Social Engineering
Message Tampering	Quantum Attacks
Traffic Analysis	Keystroke Logging

---

🎛️ Phantom Network Stats

pie title Network Distribution
    "Node A (Entry)" : 33
    "Node B (Middle)" : 34
    "Node C (Exit)" : 33

Loading

---

🧪 Testing

# Run all tests
npm test

# Run with coverage
npm run test:coverage

# E2E routing test
npm run test:e2e

---

📦 Deployment Checklist

• 🔐 Configure HTTPS (required)
• 🔑 Set strong JWT_SECRET
• 💾 Configure VedDB persistence
• 📊 Set up monitoring
• ⚡ Enable rate limiting
• 🌐 Configure production CORS
• 🛡️ Run security audit

---

🤝 Contributing

gitGraph
    commit id: "Fork"
    branch feature
    commit id: "Create Branch"
    commit id: "Make Changes"
    commit id: "Add Tests"
    checkout main
    merge feature id: "Pull Request"
    commit id: "Merged! 🎉"

Loading

1. Fork the repository
2. Create a feature branch
3. Make your changes
4. Add tests
5. Submit a pull request

---

📜 License

MIT License - See LICENSE for details.

---

🌟 Star this repo if you believe in privacy! 🌟

Built with 💜 and cryptographic paranoia