Infrastructure
for Human Dignity

The Problem

When hurricanes, earthquakes, or floods strike, cell towers go down. First responders lose coordination. Communities are cut off from emergency services. Traditional communication infrastructure is fragile.

How GhostWire Helps

• Works without internet: WiFi Direct and Bluetooth LE create local mesh networks between devices.
• Long-range with LoRa: LoRa radio extends range to kilometers, connecting isolated communities.
• Battery and solar powered: Runs on Raspberry Pi, laptops, or phones. No grid power needed.
• Delay-tolerant messaging: Messages queue and forward when connectivity resumes. No message is lost.
• Encrypted coordination: AES-256-GCM ensures sensitive operational data stays private.

Real-World Scenario

A hurricane hits the coast. Cell towers are down across 200km. Rescue teams deploy with GhostWire on laptops and phones. A mesh network forms automatically. Coordination messages flow between teams. Medical supply requests reach the staging area. Status updates flow back to command. All without a single cell tower.

The Problem

Corporate surveillance is ubiquitous. Every message, call, and search is logged, analyzed, and monetized. Even "encrypted" services collect metadata about who you talk to, when, and how often.

How GhostWire Protects You

• No servers, no logs: Pure P2P architecture means there is no central server to log your activity.
• End-to-end encryption: AES-256-GCM authenticated encryption. No intermediary ever sees plaintext.
• Metadata minimization: Messages carry only what is necessary. No phone numbers, no email addresses required.
• Traffic obfuscation: Cover traffic and timing randomization make traffic analysis significantly harder.
• Multi-profile identities: Separate cryptographic identities for different contexts. Compartmentalize your digital life.

What This Means

GhostWire gives you communication without the surveillance capitalism model. Your conversations belong to you — not to a corporation that sells your attention to advertisers.

The Problem

2.6 billion people lack reliable internet. Rural communities are told to wait for infrastructure that may never arrive. ISPs have no economic incentive to serve sparse populations.

How GhostWire Helps

• Community-owned infrastructure: Each device is a node. The more people join, the stronger the mesh becomes.
• AI-powered routing: LightGBM anomaly detection and GNN routing learn optimal paths through your specific terrain.
• Multi-hop messaging: Messages travel through multiple nodes to reach distant recipients. No direct connection needed.
• Works with commodity hardware: Laptops, phones, Raspberry Pi devices. No specialized equipment required.
• Trained on real data: Our GNN model is trained on the GuifiSants dataset — 7,931 samples from a real community mesh network in Barcelona.

Building Your Own Mesh

Start with a few devices in your community. Each person installs GhostWire. The mesh forms automatically. Add LoRa radios for longer range. The network grows organically as more people join.

The Problem

During protests, governments shut down internet access. Journalists lose their ability to communicate with editors. Activists are infiltrated by informants. Standard communication tools become liabilities.

How GhostWire Protects You

• Mesh during internet shutdowns: When the internet goes dark, GhostWire keeps working via WiFi Direct and Bluetooth LE.
• Disposable identities: Create separate profiles for different operations. Burn them when compromised.
• QR code pairing: Securely exchange keys with trusted contacts in person. No central registry to subpoena.
• Sybil resistance: Proof-of-work node admission makes it computationally expensive for adversaries to flood your mesh with fake nodes.
• Reputation system: TrustStore tracks node behavior over time. Suspicious nodes are flagged automatically.

Operational Security

Use a dedicated device for GhostWire. Enable full-disk encryption. Use lockdown mode in high-threat environments. Meet contacts in person for initial QR pairing. Never reuse identities across operations.

The Problem

Exposing wrongdoing requires transmitting sensitive documents without revealing your identity. Standard channels leave traces. Even encrypted services can be compelled to hand over metadata.

How GhostWire Protects You

• Tor integration: Route GhostWire traffic through Tor for additional anonymity layers.
• No identifying information required: No phone number, email, or real name needed to create an identity.
• End-to-end encryption: Documents are encrypted before they leave your device. No intermediary can read them.
• Stealth TCP transport: GhostWire traffic can blend with normal HTTPS traffic, making it harder to detect.
• Ephemeral sessions: Session keys are destroyed after use. No persistent state to subpoena.

Best Practices

Use a dedicated device. Connect via public WiFi. Route through Tor. Use a disposable identity profile. Meet your journalist contact in person for initial key exchange via QR code. Never reuse the same identity.

The Project

GhostWire is open-source (AGPLv3) and built in Rust for memory safety. The codebase includes a production-ready P2P networking stack, cryptographic primitives, AI/ML models, and a web dashboard.

Technology Stack

• Rust backend: libp2p networking, Kademlia DHT, Gossipsub pub/sub, QUIC/TCP transports, Axum HTTP API.
• Cryptography: AES-256-GCM, Ed25519 signatures, X25519 key exchange, ML-KEM-768 post-quantum (planned).
• AI/ML: LightGBM anomaly detection (ONNX, 76.7μs inference), GNN routing model (trained on GuifiSants dataset).
• Frontend: React web dashboard with real-time mesh topology visualization.
• Transports: WiFi Direct, Bluetooth LE, LoRa, WebRTC, TCP/IP, Reticulum, Briar.

How to Contribute

Clone the repository, read the contributing guide, and pick an area: Rust core, AI models, documentation, security research, or frontend. All contributions welcome. The project is actively seeking contributors.

What Is It?

AES-256-GCM (Advanced Encryption Standard with Galois/Counter Mode) is the industry standard for authenticated encryption. It provides both confidentiality (nobody can read your messages) and authenticity (nobody can tamper with them).

Why We Use It

• 256-bit keys: 2^256 possible keys. Brute force is physically impossible with known physics.
• Authenticated encryption: GCM mode provides built-in authentication tags. Tampered messages are rejected immediately.
• Hardware acceleration: Modern CPUs include AES-NI instructions for fast encryption without performance penalty.
• NIST standard: Reviewed and approved by the U.S. National Institute of Standards and Technology.

Implementation Details

Implemented in Rust via the crypto_machine module. Every message is encrypted before it leaves your device. No server, relay, or intermediate node ever sees plaintext. The implementation uses the ring and/or aws-lc-rs crate for cryptographic operations.

What Are They?

Ed25519 and X25519 are modern elliptic curve cryptographic algorithms based on Curve25519. Ed25519 is used for digital signatures (proving identity). X25519 is used for key exchange (establishing shared secrets).

Why We Use Them

• Perfect forward secrecy: Each session uses a unique key. Compromising one session does not compromise others.
• Fast and secure: Curve25519 is faster and more secure than older curves like NIST P-256.
• Identity keys never leave your device: Your Ed25519 private key is generated locally and never transmitted.
• Small key sizes: 32-byte keys are compact and efficient for resource-constrained devices.

How It Works in GhostWire

When two nodes connect, they perform an X25519 key exchange to establish a shared secret. This secret is used to derive AES-256-GCM session keys. Ed25519 signatures authenticate each node's identity. The entire handshake happens automatically when nodes discover each other.

What Is It?

ML-KEM-768 (Module-Lattice-Based Key Encapsulation Mechanism) is a post-quantum cryptographic standard standardized by NIST in 2024. It is designed to resist attacks from quantum computers.

Why It Matters

• Quantum threat: Future quantum computers could break X25519 and RSA using Shor's algorithm.
• Harvest now, decrypt later: Adversaries are collecting encrypted traffic today to decrypt it when quantum computers become available.
• NIST standard: ML-KEM-768 (formerly Kyber-768) is the NIST-selected standard for post-quantum key encapsulation.
• Hybrid approach: GhostWire will combine X25519 + ML-KEM-768 for defense in depth.

Current Status

ML-KEM-768 integration is planned. The cryptographic architecture is designed to support hybrid key exchange (classical + post-quantum) without breaking existing functionality.

What Is It?

libp2p is a modular peer-to-peer networking stack used by IPFS, Ethereum 2.0, and other decentralized systems. Kademlia is a distributed hash table (DHT) that enables efficient peer discovery and message routing.

Why We Use It

• Battle-tested: Used by production systems handling billions of requests.
• Modular transports: Supports TCP, QUIC, WebRTC, and custom transports. GhostWire adds WiFi Direct, Bluetooth LE, and LoRa.
• Gossipsub pub/sub: Efficient topic-based messaging with mesh optimization.
• S/Kademlia hardening: GhostWire uses hardened Kademlia parameters for security against routing attacks.

How It Works

When a GhostWire node starts, it connects to bootstrap nodes via the DHT. It discovers peers, establishes encrypted connections, and joins the mesh. Messages are routed through the DHT to their destination, hopping through intermediate nodes as needed.

What Is It?

GhostWire uses two AI models for intelligent mesh routing: LightGBM for anomaly detection (Layer 1) and a Graph Neural Network for route optimization (Layer 3).

LightGBM Anomaly Detection

• AUC 1.0: Perfect separation of normal vs. anomalous node behavior in testing.
• 76.7μs inference: Fast enough for real-time detection on every message.
• Exported to ONNX: Runs in Rust via ONNX Runtime — no Python dependency needed at runtime.

GNN Routing Model

• Trained on real data: 7,931 samples from the GuifiSants community mesh network in Barcelona (63 nodes, 31 days).
• Graph Attention Network: Learns which routes are most reliable based on historical performance.
• Adapts to conditions: Routes around congested or unreliable nodes automatically.

Why AI Matters

Traditional mesh routing uses static algorithms. GhostWire's AI learns from real network conditions and adapts. This means better delivery rates, lower latency, and automatic detection of malicious nodes.

What Is a Sybil Attack?

In a Sybil attack, an adversary creates many fake identities (nodes) to infiltrate the mesh. With enough fake nodes, they could monitor traffic, disrupt routing, or gain trust to launch further attacks.

How GhostWire Defends Against It

• Proof-of-work admission: New nodes must solve a computational puzzle before joining. Creating many fake nodes is expensive.
• Quota enforcement: Each node has rate limits. Flooding the mesh with messages is throttled.
• Blacklist management: Nodes identified as malicious are blacklisted network-wide.
• TrustStore reputation: A distributed reputation system tracks node behavior over time. Suspicious nodes are flagged and isolated.

Defense in Depth

No single mechanism is perfect. GhostWire layers multiple defenses: PoW makes fake nodes expensive, rate limits prevent flooding, and the reputation system identifies and isolates bad actors over time.

What Is It?

Even encrypted traffic can reveal information through metadata: when you communicate, how much data you send, and who you communicate with. Traffic obfuscation makes this analysis harder.

Techniques Used

• Cover traffic: GhostWire generates dummy messages that look like real traffic. An observer cannot distinguish real from fake messages.
• Timing randomization: Messages are sent at randomized intervals, not immediately. This breaks timing correlation attacks.
• Stealth TCP: GhostWire can wrap its traffic in normal-looking HTTPS packets, making it indistinguishable from web browsing.
• Metadata minimization: Messages carry only essential routing information. No sender/receiver identifiers in the packet headers.

Limitations

Traffic obfuscation makes analysis harder but not impossible. A well-resourced adversary with full network visibility could still perform statistical analysis. This is why GhostWire layers multiple defenses.

What Is It?

GhostWire includes a web-based dashboard for monitoring your mesh network in real time. Accessible at http://localhost:8080 by default.

Features

• Mesh topology visualization: See all connected nodes and their connections in real time.
• Live metrics: CPU usage, RAM consumption, network throughput, message queue depth.
• Node health: Status of each peer, latency, uptime, and reputation score.
• AI anomaly alerts: Real-time notifications when the LightGBM model detects suspicious behavior.
• Axum HTTP API: RESTful API at /api/v2/ for programmatic access to mesh data.

API Endpoints

The dashboard is powered by an Axum HTTP server with endpoints for health checks, peer lists, message stats, and more. Full API documentation is available in the docs.

What Is It?

GhostWire allows you to create multiple cryptographic identities (profiles) on the same device. Each profile has its own key pair, username, and contact list.

Why Multiple Profiles?

• Context separation: Use one profile for disaster response, another for personal communication, another for activism.
• Compartmentalization: If one profile is compromised, your other identities remain secure.
• Disposable identities: Create a temporary profile for a specific operation, then delete it.

How It Works

• QR code pairing: Meet contacts in person and scan QR codes to exchange public keys securely.
• Username discovery: Find contacts by username without a central registry — the DHT handles discovery.
• Independent key pairs: Each profile generates its own Ed25519 identity key pair. Keys never leave the device.

The Risk

If your device is physically seized by an adversary, they may be able to access local GhostWire data stored on the device. Encryption protects data in transit, but data at rest depends on your device's security.

What Is at Risk

• Stored messages: Messages cached on your device could be accessed.
• Identity keys: If the device is unlocked, Ed25519 identity keys could be extracted.
• Contact list: Your peer list and usernames could reveal your network.
• Profile metadata: Profile names and settings could reveal your operational patterns.

Mitigation Steps

• Full-disk encryption: Enable LUKS (Linux), FileVault (macOS), or BitLocker (Windows) on your device.
• Lockdown mode: GhostWire includes a lockdown mode that clears sensitive data from memory.
• Ephemeral session keys: Session keys are destroyed after use and never written to disk.
• Strong device password: Use a strong passphrase to lock your device. Biometric locks can be compelled legally in some jurisdictions.
• Remote wipe: Consider remote wipe capabilities for devices you carry in high-risk environments.

The Reality

GhostWire provides strong privacy protections, but it does not provide complete anonymity. Understanding the difference is critical for your operational security.

What GhostWire Protects

• Message content: AES-256-GCM encryption protects what you say.
• Identity: No phone numbers, emails, or real names required.
• Metadata: Minimal metadata in packet headers. No central logs.

What GhostWire Does NOT Protect

• Traffic analysis: An adversary with full network visibility could perform statistical analysis of message timing and volume.
• Physical observation: If someone sees you using GhostWire, they know you are using it.
• Endpoint compromise: If your device has malware, all bets are off.
• Social engineering: No cryptographic system can protect against human manipulation.

For Stronger Anonymity

Combine GhostWire with Tor for routing, use it in public spaces rather than at home, and follow operational security best practices. For the highest threat models, consult with a security professional.

The Risk

If either your device or your contact's device has malware (keylogger, screen recorder, rootkit), encryption cannot protect the content of your messages. The malware sees the plaintext before encryption or after decryption.

Why Encryption Is Not Enough

• Keyloggers: Record everything you type, including messages before they are encrypted.
• Screen recorders: Capture what you see on screen, including decrypted messages.
• Rootkits: Can intercept messages at the application level, bypassing encryption entirely.
• Compromised OS: A malicious operating system can subvert any application.

Best Practices

• Use a dedicated device: A device used only for GhostWire, with minimal software installed.
• Keep software updated: Apply security patches promptly to your OS and all applications.
• Verify integrity: Check SHA-256 checksums and GPG signatures on all downloads.
• Use a hardened OS: Consider Qubes OS, Tails, or Whonix for high-threat environments.
• Out-of-band verification: Verify critical information through a separate communication channel.

The Situation

GhostWire has not yet undergone an independent third-party security audit. This is a significant limitation that users should understand before relying on GhostWire for high-stakes communication.

What We Have Done

• Internal security audits: Available in docs/SECURITY_AUDIT_REPORT_2026.md.
• Threat modeling: Comprehensive threat model documented in docs/SECURITY.md.
• Open source: All code is publicly auditable on GitHub. Anyone can review it.
• Standard cryptography: We use well-reviewed cryptographic libraries (ring, aws-lc-rs) rather than implementing our own crypto.

What We Need

• Independent audit: A professional security firm should review the entire codebase.
• Formal verification: Critical cryptographic code should be formally verified.
• Bug bounty: A structured bug bounty program would incentivize external security research.

How You Can Help

If you are a security researcher, we welcome code review and vulnerability reports. If you represent an organization that conducts security audits, please contact us. We are actively seeking an independent audit partner.