Skip to content

Pigeon

Pigeon is an end-to-end encrypted mesh messenger for iOS. Devices can exchange the same ciphertext over local Bluetooth mesh links or, when enabled, over federated zero-knowledge relays for peers outside local range.

The project is pre-release and not independently audited. Treat the documentation as the current design and implementation map, not as a security certification.

What exists now

  • On-device Ed25519 identity with Keychain storage.
  • QR-based contact exchange with display name, signed identity bundle, and signed relay endpoints.
  • Noise XX handshake and Double Ratchet in the standalone PigeonCrypto package.
  • BLE mesh transport, fragmentation, duplicate suppression, TTL, and local store-and-forward behavior.
  • Encrypted local storage and per-chat ephemeral mode.
  • Optional zero-knowledge relay transport and Rust relay server.

Where to start

  • Security Model for the threat model and audit blockers.
  • Roadmap for shipped, active, planned, and horizon work.
  • API Reference for generated PigeonCrypto, PigeonMesh, and PigeonRelay API docs.
  • Contributing for local checks and review expectations.