Discord Age Encryption Autor: Sensei

Discord Age Encryption adds post-quantum end-to-end encryption to Discord. Messages are encrypted on your device before they're sent — Discord's servers only ever see ciphertext.

How it works:

• Messages are encrypted using age (ML-KEM-768×X25519 hybrid key agreement + ChaCha20-Poly1305) — a modern, well-audited encryption format
• Every message is digitally signed with ML-DSA-87, guaranteeing it could only have come from the holder of that keypair — tampering or forgery is flagged immediately
• Signatures are bound to the channel (and server, if applicable), preventing messages from being replayed elsewhere
• Encrypted messages are sent as .age file attachments, and decrypted automatically for anyone in the conversation

Local data & keys:

• Your keys and data are stored encrypted at rest using Argon2id + XChaCha20-Poly1305
• Nothing is ever uploaded anywhere — all cryptography happens locally
• Core algorithms (ML-DSA-87, Argon2id, XChaCha20-Poly1305, SHAKE256) are implemented in memory-safe Rust, compiled to WebAssembly

Verifying contacts:

Each contact's public key is shown as a SHAKE256 fingerprint, so you can verify it out-of-band if you want extra assurance you're talking to the right person.

Limitations:

⚠ No forward secrecy — if your private key is ever compromised, previously encrypted messages could be read. Use a strong passphrase and keep your key safe.

Free and open source, licensed under GPLv3. Not affiliated with Discord Inc. — this is an independent research project. Use at your own risk.

• Source & Releases
• Troubleshooting
• License