GitHub
Wiki
Blog
Soundtrack
Community
SimpleX Group
Contact
Cover-- / ----
--
--
0:00
--:--
Lyrics
Select a track...
Close
SimpleGo is fully compatible with the SimpleX messaging protocol and the SimpleX Chat application. SimpleX Protocol hardware device. Encrypted messaging device compatible with SimpleX network.

4-Layer Per-Message Encryption · SimpleX-Compatible · 100% Open Source

Compatible with SimpleX Protocol

Secure Communication for Critical Sectors

When a data breach means regulatory penalties, patient harm, or compromised operations, a smartphone app is not enough. SimpleGo provides dedicated, hardware-encrypted communication that never touches a phone.

Healthcare

GDPR-compliant patient communication for clinics, practices, and care facilities. No cloud storage, no metadata, no smartphone required. Dedicated device for medical staff.

IoT & Infrastructure

Secure machine-to-machine communication for industrial control systems, energy infrastructure, and building automation. Hardware-encrypted command channels with zero attack surface.

Enterprise

Board-level communications, M&A negotiations, sensitive HR matters. Dedicated devices that stay in the office, leave no traces on personal phones, and cannot be remotely compromised.

Journalism & NGOs

Source protection with no phone number, no metadata, and no persistent identity. Physical device that can be wiped, handed over, or destroyed without compromising the network.

Six Features That No Other Device Combines

After analyzing more than 70 devices across consumer, military, and open-source domains, the maximum feature overlap found in any single product is three out of six. SimpleGo is designed to achieve all six.

4-Layer Per-Message Encryption

Four cryptographically independent envelopes around every message: Double Ratchet with post-quantum hybrid key exchange, per-queue NaCl, server-to-recipient NaCl, and onion forwarding. Plus three additional TLS 1.3 tunnels for transport.

World First in Hardware

Bare-Metal Firmware

No Android. No Linux. No smartphone OS. Runs directly on the microcontroller via FreeRTOS with approximately 50,000 lines of C - three orders of magnitude less code than a phone.

Implemented

No Baseband Processor

No cellular baseband with DMA access running proprietary firmware. Eliminates the entire class of baseband vulnerabilities that affect every smartphone on the market.

By Design

No Persistent Identity

No user IDs, phone numbers, or usernames. Communication uses ephemeral unidirectional queues. No party - including relay servers - can correlate senders and recipients.

Protocol Design

Multi-Vendor Secure Elements

Triple-vendor architecture: Microchip ATECC608B, Infineon OPTIGA Trust M, NXP SE050. No single supply-chain compromise can extract the full key material.

Novel Concept

Fully Open Source

Software under AGPL-3.0, hardware under CERN-OHL-W-2.0. Audit every line of code, verify every PCB trace, build your own. No black boxes, no trust assumptions.

Public Repository
3 / 6
Maximum overlap found in any existing device worldwide
Existing mesh devices achieve bare-metal + no baseband + open source, but lack layered encryption, identity-free design, and secure elements
Per-Message Encryption Path
MSGPlaintext
L1 - E2EDouble Ratchet+ PQ Kyber/NTRU
L2 - S2DSender-to-Dest
L3 - D2RDest-to-Recv
L4 - F2DOnion Layer
TLS 1.3- Forwarding
TLS 1.3- Destination
TLS 1.3- Recipient
4 envelopes - 3 tunnels - 2 relays - 0 identity

Four Nested Cryptographic Envelopes

Most messaging protocols use two encryption layers: end-to-end plus TLS transport. SimpleGo wraps every message in four independent envelopes, each with different keys, algorithms, and nonces. Compromising one layer does not weaken any other.

4 Application Layers - Per Message
e2e
Layer 1 - Double Ratchet End-to-End
The innermost envelope. Initial key agreement uses X3DH over Curve448 to establish a shared secret without server involvement. The Double Ratchet then derives a unique key for every single message. Key agreement is augmented with hybrid post-quantum cryptography: sntrup761 KEM integrated into the X448 ratchet. If a quantum computer breaks one, the other still holds.
X3DH + X448Double RatchetAES-256-GCMPerfect Forward Secrecysntrup761 PQ-KEM
Defends against: Server compromise, network surveillance, MITM, future quantum computers.
▼ wrapped in ▼
s2d
Layer 2 - Sender-to-Destination NaCl Cryptobox
The already-encrypted message gets a second envelope addressed to the recipient's destination relay. X25519 key exchange with XSalsa20-Poly1305, unique keypair per message queue. Even if TLS is broken, queue correlation between different contacts is impossible.
X25519 + XSalsa20-Poly1305Per-Queue Unique KeysNaCl Cryptobox
Defends against: Forwarding relay seeing message metadata. Knowledge of Queue A gives zero information about Queue B.
▼ wrapped in ▼
d2r
Layer 3 - Destination-to-Recipient NaCl Cryptobox
The destination relay re-encrypts the message with the recipient's public key before delivery. This prevents correlation between incoming and outgoing traffic at the relay, even with full access to the server's network interface. Incoming and outgoing packets are cryptographically unlinkable.
NaCl Cryptobox re-encryptionTraffic decorrelation
Defends against: Traffic analysis at the destination relay. An observer cannot match incoming sends to outgoing deliveries.
▼ wrapped in ▼
f2d
Layer 4 - Forwarding-to-Destination Onion Routing
Private Message Routing (since SimpleX v5.8) adds 2-hop onion routing between relays. The sender's relay forwards without knowing the final destination. The recipient's relay delivers without knowing the original sender. Neither relay sees the complete path.
2-Hop Onion RoutingPFWD / RFWD CommandsPrivate Message Routing
Defends against: Both relay servers colluding. Even joint analysis of all relay logs cannot reconstruct sender-recipient pairs.
All content padded to 16,384 bytes at every layer. A one-word reply looks identical to a 15,000-character message on the wire.

Engineering at the Edge

A native C implementation of the SimpleX messaging protocol running on bare-metal hardware. Written from scratch, verified for interoperability with the official reference application.

4x
Per-Message Enc Layers
50K
Lines of Code
128
Contacts Supported
1.9%
PSRAM Utilization
AspectSmartphoneSimpleGo Device
Codebase~50,000,000 lines~50,000 lines
Baseband ProcessorClosed-source, DMA access, always activeNone
Background ServicesHundreds with network accessSingle application
TelemetryContinuous OS + app collectionZero
Key StorageSoftware or TEEHardware Secure Element
Tamper DetectionNoneActive monitoring + zeroization
Encryption Layers2 (E2E + TLS)4 per-message + 3 TLS tunnels
Regulatory FitPersonal device, mixed useDedicated, auditable, GDPR-ready

Three Security Tiers

Different threat models require different protection levels. From developer-friendly to state-resistant - one codebase, three security architectures. Made in Germany.

Tier 1

DIY

from EUR 100
vs. casual & opportunistic adversaries
  • MCU: ESP32-S3 (Dual-core, 240 MHz, 8MB PSRAM)
  • Secure Element: ATECC608B (Microchip)
  • Security: Secure Boot v2, Flash Encryption
  • Connectivity: WiFi 802.11 b/g/n, Bluetooth 5.0
  • Form Factor: LilyGo T-Deck Plus, off-the-shelf

Developers, small practices, privacy-aware users

Tier 3

Vault

EUR 1,500 - 15,000
vs. state-level adversaries with physical access
  • MCU: STM32U5A9 (Cortex-M33, 4MB Flash)
  • Secure Elements: Triple-vendor (+ NXP SE050)
  • Tamper: DS3645 supervisor, sub-microsecond zeroization
  • Connectivity: WiFi 6, 5G NR, LoRa, satellite
  • Enclosure: Potted CNC aluminum, hand-assembled in Germany

Government, high-risk individuals, critical infrastructure

From Silicon to Server

SimpleGo controls the entire communication path. The hardware client speaks to our own relay infrastructure built on GoRelay, a zero-knowledge server written in Go. Fully compatible with SimpleX Chat. No accounts, no logs, no metadata.

3
Networks
3
Protocols
SimpleX Compatible
0
Accounts Required
SimpleGo SMP
Building
Message relay running the official SimpleX server software. Delivers encrypted messages between SimpleGo devices and any SimpleX Chat app on iOS, Android, or desktop.
smp.simplego.dev
xftp.simplego.dev
SMP v7 with Private Message Routing
XFTP encrypted chunked file transfer
TLS 1.3 with Ed25519 + X25519 handshake
German hosting, LUKS full-disk encryption
Zero-knowledge, no IP logging in codebase
GoRelay
Building
Our own relay server written in Go. Runs the GoRelay Protocol with Noise Framework encryption for IoT and microcontrollers. Single binary, zero runtime dependencies.
grp.gorelay.dev
xftp.gorelay.dev
GRP/1 via Noise IK/XX with mutual auth
Per-message AES-256-GCM with key deletion
BadgerDB storage, 48h TTL auto-purge
German hosting, LUKS full-disk encryption
ML-KEM-768 + X25519 post-quantum (planned)
LoRa Mesh
Building
Meshtastic LoRa gateways bridging radio mesh to our SMP relays. No internet needed on the device - encrypted messages reach any SimpleX client via 868 MHz.
868 MHz LoRa (EU)
2-3 Gateways (NRW)
Meshtastic mesh on ESP32 + SX1262 radio
LoRa-to-SMP bridge via gateway WiFi link
2-15 km per hop, automatic mesh relay
Native SimpleGo LoRa or external bridge
Full 4-layer encryption preserved end-to-end
GoRelay on GitHub →

Built by One Person

No corporation. No venture fund pulling strings. Just relentless engineering and a belief in freedom.

Sascha Dämgen, founder of SimpleGo
// Not your keys, not your coins

Security is not a feature.
It is the whole point.

SimpleGo is the world's first native C implementation of the SimpleX Messaging Protocol, running bare-metal on dedicated hardware. No Android. No baseband processor. No smartphone attack surface. Every layer was reverse-engineered, verified byte-by-byte against the reference implementation, and written from scratch.

Built by a single engineer in Recklinghausen, Germany, driven by a multi-agent AI workflow and an obsession with getting the cryptography exactly right. Code here is not just function. It is craft. Every module is shaped with the care of an artist and the rigor of a security researcher.

Freedom of speech is not negotiable. Private communication is a human right, not a privilege granted by platforms. SimpleGo exists so that no corporation, no government, and no algorithm ever sits between you and the people you talk to.

And the work does not stop at hardware. In active development: Carvilon CyberDesk, a secure cross-platform environment written in Rust, with SimpleGoX, the native multi-messenger, built right in. One hardened ecosystem, from a 10 euro microcontroller all the way to the desktop.

Sascha Dämgen
Independent Security Researcher//Code Artist//FOSS Developer

Ready to Secure Your Communication?

Open source. Fully transparent. Made in Germany. The first dedicated hardware-encrypted communication ecosystem independent of smartphones.

Cover fullscreen