mSeal

Zero-Trust Ephemeral Messaging — Encrypted, Self-Destructing, No Metadata

No logs. No metadata. No mercy.

Security · Architecture · Quick Start · Ecosystem

---

What is mSeal?

mSeal (formerly HermesLock) is a zero-trust ephemeral messaging platform. Every message is end-to-end encrypted, self-destructs after a configurable TTL, and leaves zero metadata on servers. Built for people who need real privacy.

Security

Feature	Implementation
Encryption	AES-256-GCM with per-message keys
Key Exchange	X25519 elliptic curve Diffie-Hellman
Self-Destruct	Configurable TTL (1 min to 7 days)
Forward Secrecy	New ephemeral key per session
Zero Metadata	Server stores nothing — not even timestamps
No Logs	All access logs are write-only, encrypted, auto-purge

Architecture

┌──────────────┐         ┌──────────────┐         ┌──────────────┐
│   Sender     │────────▶│   mSeal      │────────▶│  Recipient   │
│   Device     │  E2E    │   Server     │  E2E    │   Device     │
│              │ Encrypt │              │ Decrypt │              │
│ - Generate   │         │ - Route      │         │ - Decrypt    │
│   ephemeral  │         │ - Validate   │         │ - Display    │
│   key        │         │ - Enforce    │         │ - Auto-      │
│ - Encrypt    │         │   TTL        │         │   destruct   │
│ - Send       │         │ - Auto-purge │         │              │
└──────────────┘         └──────────────┘         └──────────────┘
       │                        │                        │
       └────────────────────────┼────────────────────────┘
                                │
                    ┌───────────v───────────┐
                    │  Zero Knowledge Server  │
                    │                         │
                    │  - No message content   │
                    │  - No user identities   │
                    │  - No metadata stored   │
                    │  - Ephemeral routing    │
                    └─────────────────────────┘

Features

Feature	Status	Description
E2E Encryption	🚧 Building	AES-256-GCM with X25519 key exchange
Self-Destruct	🚧 Building	Configurable TTL on all messages
Zero Metadata	🚧 Building	Server stores zero identifying info
Group Chats	📋 Planned	Encrypted group messaging
File Sharing	📋 Planned	Encrypted ephemeral file transfer
Screen Shield	📋 Planned	Screenshot prevention

Tech Stack

• Frontend: Next.js 16 · TypeScript · Tailwind CSS
• Crypto: Web Crypto API · libsodium.js
• Backend: Node.js · WebSocket
• Database: None (ephemeral — messages never persist)

Quick Start

git clone https://github.com/Davidcarmelalex/hermeslock.git
cd hermeslock
npm install
cp .env.example .env.local
npm run dev        # http://localhost:3000

Ecosystem

mSeal is part of the M&R&Nothing ecosystem:

• Core messaging layer for MrNothing OS
• Secure communications channel for VOID.Bounty researchers
• Privacy infrastructure for Jan Niti whistleblowers

→ github.com/Davidcarmelalex/MrNothingEcosystem

---

Sealed. No logs. No metadata. No mercy. MR° · M&R&Nothing · 2026 · A tribute, by David Carmel Alex