Verify an Android APK with SHA-256: What the Result Means
How to compare an APK against a published SHA-256 checksum, and why a matching hash does not prove source equivalence or a security audit.
Comparison
THE LIVARA JOURNAL / PRIVACY & TECHNOLOGY
A more private internet.
A little more understood.
Ideas, explainers, and useful questions about encryption, private messaging, and the technology in your everyday life.
Discover the latest ↓UNDERSTAND SECURITY. MAKE ROOM FOR CONVERSATION.A publication by Livara ↗
THE READING ROOM
Cryptography
The 'Military-Grade' Sleight of Hand: Decoding Messaging Cryptography
Discover why 'military-grade encryption' is a marketing illusion, and learn how to evaluate private messengers using transparent, verifiable cryptographic primitives.
News
The Asynchronous Trap: How Post-Quantum Encryption Works When Your Contact Is Offline
Discover how hybrid post-quantum messaging protocols use ML-KEM-768 prekey bundles to maintain forward secrecy even when your contact remains offline for weeks.
Field note
Messaging Layer Security MLS RFC 9420 vs LGS1 Protocol
A detailed technical comparison between the IETF Messaging Layer Security (MLS) tree-based ratchet and Livara's hybrid post-quantum LGS1 sender-key architecture.
News
The Bandwidth Trap: How LGS1 Scales Post-Quantum Encryption to Group Chats
Pairwise post-quantum key exchanges overwhelm network bandwidth in large group chats. The LGS1 protocol solves this scaling bottleneck by wrapping group sender keys inside hybrid post-quantum LVR1 envelopes.
Field note
Closing the Voice Loophole: Why WebRTC Signalling Demands LVR1 Envelopes
Standard voice protocols leak connection details during setup. Learn how Livara Chat secures voice call privacy by sealing WebRTC signalling inside LVR1 envelopes.
Field note
Nonce Reuse and Replay Attacks: How HKDF-SHA-256 and AES-256-GCM Guard Message Integrity
A technical breakdown of how HKDF-SHA-256 key derivation and AES-256-GCM authentication eliminate nonce collisions and guard private chats against replay attacks.
Field note
Beyond the App Store: How Malicious Chrome Extensions Read Messages and Hijack Web Messengers
Discover how rogue browser extensions hijack unencrypted DOM text in web messengers and learn how isolated Web Workers and offline integrity proofs neutralise browser-level threats.
News
Safety Numbers in Private Messaging: What Verification Proves
What a safety number checks, how to compare it through another channel, and why key changes, metadata and device compromise remain separate risks.
Field note
Post-Quantum Encryption in the Browser: How Web Apps Secure Messages Without App Store Installs
In-browser post-quantum encryption uses WebAssembly and WebCrypto to deliver zero-trust end-to-end encrypted messaging directly inside the browser, eliminating app store dependencies.
News
The End of the Password Hash: Why Messengers Demand a Zero Knowledge Password Proof
Traditional password hashes leave credentials vulnerable on servers. Discover how Secure Remote Password (SRP) protocols allow messengers to verify your identity without ever transmitting your password.
Field note
SIM Swap Vulnerabilities in Messaging: How Zero-Knowledge Proofs Stop Telco Hijacking
SIM swap attacks exploit mobile carrier weaknesses to steal account access. Learn how zero-knowledge SRP authentication decouples chat privacy from carrier trust.
News
A NOTE FROM THE PUBLICATIONGood questions deserve
Good questions deserve
room to breathe.
Pulse comes from the people building Livara. Read the bylines, follow the sources, and explore the trade-offs behind the technology.
Our editorial policy ↗