Signal Android is a secure messaging application providing end-to-end encrypted communication for text, voice, and video. The architecture follows a modular MVVM pattern with clean separation between UI, domain, and data layers, utilizing Android Architecture Components (ViewModel, LiveData, Flow) and a custom JobManager for background tasks. Key features include encrypted messaging, group chats, disappearing messages, stories, payments (MobileCoin), encrypted backups, and device transfer. The codebase demonstrates strong engineering practices through reusable components like the MappingAdapter system for RecyclerViews, Debouncer utilities for input handling, and encrypted Glide caching for secure media storage. While actively maintained with modern Android practices, the project faces medium technical drift due to ongoing database schema evolution (30+ migration files) and concurrency complexity from mixed RxJava/coroutine usage.
Themis is a cross-platform cryptographic library developed by Cossack Labs, providing high-level security primitives such as Secure Cell (symmetric encryption with three modes: Seal, Token Protect, Context Imprint), Secure Message (asymmetric encryption and digital signing), Secure Session (mutual authentication and key exchange), Secure Comparator (zero-knowledge password comparison), and key generation (EC, RSA, symmetric). The core is implemented in C with a cryptographic engine abstraction layer (Soter) that supports OpenSSL, BoringSSL, and a custom Ed25519 implementation. The library exposes consistent APIs across 13+ language wrappers including Python, Go, Rust, Java, Swift, Objective-C, JavaScript (Node.js and WebAssembly), PHP, Ruby, C++, and React Native. The codebase is well-structured with extensive unit, integration, and fuzz testing, CI/CD pipelines for each wrapper, and cross-language compatibility tests. While the repository has deprecated older APIs and maintains multiple backends, it remains actively maintained with regular releases, security patches, and community engagement.
Threema Android is a secure messaging application with end-to-end encryption using NaCl/libsodium. It features a modular architecture following clean architecture principles with separation into app, domain, data, and common layers. The app uses MVVM with ViewModels and StateFlow/LiveData, dependency injection via Koin, and Kotlin coroutines for asynchronous operations. Key functionality includes text/media messaging, voice/video calls, group chats, polls, contact management, backup/restore, multi-device synchronization, and availability status indicators. The application supports multiple build variants for different distribution channels (Google Play, Huawei AppGallery, F-Droid, Threema Shop) and includes enterprise features for business users. It relies on SQLCipher for encrypted local storage, implements custom CSP/D2M protocols for server communication, and provides web client functionality for desktop access.
Shadowbroker is a full-stack intelligence platform that aggregates real-time OSINT data from 60+ public sources into a geospatial dashboard with secure mesh networking capabilities. The architecture consists of a Next.js/React frontend with MapLibre GL visualization, a Python/FastAPI backend handling data fetching and mesh protocols, and a Tauri-based desktop application for local operation. Key features include aircraft/ship/satellite tracking, encrypted Wormhole messaging, InfoNet reputation/governance system, Agentic AI channel for automated analysis, OSINT reconnaissance tools, and time machine snapshot playback. The platform emphasizes security through SSRF protection, HMAC authentication, and privacy-preserving mesh communications while providing extensibility via toggleable data layers and plugin-like agent skills.