10
Signal Protocol in Javascript for Browsers (programming.dev)
submitted 1 day ago* (last edited 1 day ago) by xoron@programming.dev to c/opensource@programming.dev
5 comments fedilink hide all child comments

Id like to share my implementation of the signal protocol that i use in my messaging app. The implementation is in rust and compiles to WASM for browser-based usage.

https://github.com/positive-intentions/signal-protocol

Its far from finished and im not sure when its a good time to share it, but i think its reasonable now.

The aim is for it to align with the official implementation (https://github.com/signalapp/libsignal). That version was not used because my use case required client side browser-based functionality and i struggled to achieve that in the official one where javascript is used but is targeting nodejs.

There are other nuances to my approach like using module federation, which led to me moving away from the official version.

I am using AI to do this so its important to be clear that im not asking you to audit or review my vibecoded project. While i have made attempts to create things like audits and formal-proof verication, i know better than to trust AI when it tells me its working correctly.

Sharing it now if there is feedback about the implementation. Anything i may be over looking? Feel free to reach out for clarity on any details.

See it in action here in the work-in-progress demo: https://p2p.positive-intentions.com/iframe.html?globals=&id=demo-p2p-messaging--p-2-p-messaging&viewMode=story

top 5 comments
sorted by: hot top controversial new old
[-] cypherpunks@lemmy.ml 1 points 8 hours ago* (last edited 8 hours ago)

I am using AI to do this so its important to be clear that im not asking you to audit or review my vibecoded project. While i have made attempts to create things like audits and formal-proof verication, i know better than to trust AI when it tells me its working correctly.

Sharing it now if there is feedback about the implementation. Anything i may be over looking? Feel free to reach out for clarity on any details.

Did you write this post using an LLM too? You say that you are "not asking you to audit or review my vibecoded project" and then in the very next paragraph request "feedback about the implementation".

Here is my feedback: stop trying to vibe-code privacy software.

i know better than to trust AI when it tells me its working correctly

if you know better, why are you continuing to do it, and to post your outputs here?

what's the goal?!

[-] xoron@programming.dev 1 points 7 hours ago

my bad. i wrote the post, but im no shakespeare. the confusing messaging was meant to convey along the lines that im aware that people have better things to do than review my project, id like to put it out there if youre interested.

im mainly working on a messaging app as linked. several secure messaging apps exist and like anyone else working on a messaging app, i want mine to be secure. in the cybersec community there is emphesis on open source. the project is linked in the post to share (because otherwise people arent going to come across it).

ive done a good amount of testing and reviewing myself, but im sure i can spend more time. i try to make it clear in this post and the readme that its still a work in progress.

[-] cypherpunks@lemmy.ml 1 points 7 hours ago* (last edited 7 hours ago)

given the fact that LLMs' outputs can include verbatim or near-verbatim excerpts of their training data, how do you justify placing an open source license (or more generally, any copyright claim of your own) on source code you've "authored" using one of these automatic plagiarism machines?

[-] xoron@programming.dev 1 points 5 hours ago

im not sure how easy it is to get LLM's to output near-verbatim. different models have understandably different results. i dont know if youre asking me to justify using AI?

considering how well documented and discussed the signal protocol might be, its understandable that the LLM would have a decent grasp of the concept from the onset and may well be able to get near-verbatim results. i dont want "using AI" to be used to undermine my efforts. what you see is the result of the typical software development process when i planned and iterated for improvements. im sure you can imagine how AI can help in the process.

im not an expert on licences. i chose that licence after a fairly brief consideration... you're the first to give any pushback on it. we can discuss further if you can share any insights on licences. i created the project. its not cloned and refactored from some other existing implementation. i cant be more transparent than it being on github with a commit history.

we then start leaning towards the questions of: if anyone authors any code they produce with AI?

[-] poVoq@slrpnk.net 2 points 1 day ago

This might be interestng for some xmpp webclients, but there is also the work in progress: https://github.com/conversejs/libomemo.js

this post was submitted on 22 Feb 2026
10 points (85.7% liked)

Opensource

5621 readers
44 users here now

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

CreditsIcon base by Lorc under CC BY 3.0 with modifications to add a gradient

⠀

founded 2 years ago
MODERATORS
pylapp@programming.dev