Bilateral US ↔ RF Diplomatic Channel · Cryptographically Closed Room
NIGHTBOX Shararam
An encrypted, end-to-end diplomatic room.Зашифрованная дипломатическая комната — конец-в-конец.
Pick your character. Pick a city. Sign in via Google (US) or Yandex (RF) — third-country accounts politely closed. Browsers negotiate WebRTC + X25519 ECDH + AES-256-GCM directly. NIGHTBOX servers route the handshake and never see plaintext.
2Doors
14Rooms
AES-256Session cipher
P2PTransport
Step 01 · Persona
01Pick your character
Your visual persona — a Smesharik from Шарарам, the friendly Russian animation universe. Selecting one mints a fresh in-browser ed25519 keypair bound to that character for this session.
Step 02 · Negotiating location
02Pick a diplomatic room
Choose where you'd like to meet. Themed rooms scattered across the bilateral map — historical, geographical, symbolic. Your room appears next to your name in the online roster so peers know where to find you. Lobby is the catch-all for general traffic.
Step 03 · Entry policy · 🦆🏰
03Two doors. Two ecosystems.
The cryptographic duck moat 🦆 lets through US accounts (Google) and RF accounts (Yandex) — the two sovereign principals NIGHTBOX exists to serve. Third-country accounts: the diplomatic room is closed, but open infrastructure for all is at /.well-known/.
No third-party trackers. No ad pixels. We store: provider, ID, email, display name, avatar URL — that's it. HMAC-signed cookie, 30-day TTL, HttpOnly. Logout clears it.
Step 04 · Identity passport
04Your identity card
An ed25519 keypair was generated in your browser (or a SHA-256 random-seed fallback on older browsers). Your public-key fingerprint is encoded as 6 emojis. Share them with a friend — they enter the same six to verify they are talking to you and not a third party.
Identity
—
—
Your emoji fingerprint
— — — — — —
Show raw public key
—
Step 05 · Peer handshake
05Verify a friend
Ask your friend for their 6-emoji fingerprint (verbally, via Signal, Telegram, whatever). Tap their emojis from the picker below. When all six are entered, we check whether they match an expected peer in this browser's local roster.
No match. Either the fingerprint is wrong, or this peer hasn't been registered in your local roster yet. Ask them to open this page first so a roster slot is populated.
🛰 Live roster · Online now
Diplomats present
Other authenticated visitors currently in /play. Click any peer to initiate an encrypted P2P session — your browsers negotiate a WebRTC DataChannel, derive an AES-256-GCM session key via X25519 ECDH, and chat end-to-end encrypted. NIGHTBOX servers only see the initial handshake — messages route browser-to-browser direct.
—
Encrypted P2P node
—
🔐 X25519 ECDH key agreement → HKDF-SHA-256 derived AES-256-GCM session key. Each message has random 96-bit nonce. NIGHTBOX server sees zero plaintext.
🤖 Diagnostic engine · 10 lawful lanes
Find your bilateral common ground
An AI agent searches 10 lawful US-RF intersection lanes — Berman Amendment, OFAC general licenses, Russian cultural-commons frameworks — for opportunities matching your interests. Diagnostic, not normative. Powered by Gemini Flash via Vercel AI Gateway. Rate-limited to 10 queries every 5 minutes.
Thinking through the lawful intersection lanes…
Crypto note.This is a working proof-of-concept. Browser-generated ed25519 (or SHA-256 random-seed fallback). Emoji-fingerprint encoding uses a 16-symbol curated set; 6 emoji ≈ 24 bits of fingerprint entropy (enough to defeat casual confusion attacks, not high-stakes adversarial collision). Real-grade P2P transport (WebRTC DataChannel + Noise protocol + post-quantum hybrid X25519+ML-KEM) is roadmapped, not shipped yet — current "room" is localStorage-only, single-browser, for demonstration. Inspired by Smeshariki Shararam (shararam.ru) for the friendly visual register; cryptographically inspired by Signal Safety Numbers + Briar Bramble pattern.