Tadpole Cipher
A tactical offline encryption tool to protect your communications against third-party analysis and artificial intelligence.
🛡️ The Purpose (Raison d'Être)
In our current digital ecosystem, even "end-to-end encrypted" messengers collect valuable metadata. Your texts pass through dozens of servers, are indexed by algorithms, and analyzed by artificial intelligence for profiling or model training (LLMs).
Tadpole Cipher proposes a radical approach: encryption at the source, totally disconnected from any network.
Tadpole Cipher is not a messenger. It is a security airlock, a pure text processing tool that encrypts your messages before they even touch the Internet. Once your text is locked (supporting accents, complex punctuation, emojis, and Japanese), it transforms into a strict random character string.
You can copy this gibberish and paste it into WhatsApp, Telegram, Discord, via SMS, or Email. For the transport platform, the ISP, or a behavioral analysis AI, the message is unreadable and devoid of any semantics. They will know neither your mood nor your intentions.
⚙️ Cryptographic Mechanics (How does it work?)
The core of Tadpole Cipher relies on strict and deterministic symmetric key derivation. To lock or unlock a message, two complementary elements are required simultaneously:
A PIN Code (4 digits): It acts as a fast cryptographic seed and a psychological lock for the user.
A Master Phrase (3 words minimum): This is the true cryptographic secret. It brings the necessary entropy and mathematical complexity.
Behind the scenes: The algorithm merges the PIN and the Master Phrase, then subjects this combination to a one-way cryptographic hash function (via the robust SHA-256 standard). This process generates an ultra-secure 256-bit seed, which feeds a pseudo-random number generator (PRNG).
The text is then uniquely encrypted byte by byte. The beauty of this system lies in its asymmetry of effort: encryption is instantaneous for you, but mathematically impossible to reverse for an attacker who does not possess the exact combination of the PIN and the phrase.
🏗️ Architecture and Technical Choices
The project was designed as a pocket vault: lightweight, cross-platform, and visually premium.
Framework: Developed in Flutter (Dart) for optimized native compilation on Android, Windows, and potentially iOS/Linux from a single codebase.
Interface & UX: Fluid state management via Provider to decouple mathematical logic from the graphical interface. "Zero Latency" haptic and sound feedback (assets preloaded in RAM via audioplayers for an immediate tactile sensation).
Aesthetics (GLSL Shaders): Advanced use of flutter_shaders. The application is not just secure; it is alive. The background is a dynamic cryptographic fluid (running at 60 FPS) that reacts to your touch and visually validates encryption success (Blue/Cyan) or errors (Red), ensuring a premium experience without sacrificing your device's battery.
⚖️ Compromis and Trade-offs
Security is a matter of choice. Here are ours:
1. Standalone Tool vs. Messenger Plugin
The choice: A disconnected standalone application. Why? Creating a custom keyboard or a plugin would require asking your operating system for critical permissions (permanent keystroke logging, network access). Tadpole Cipher asks for no network permissions. By technical design, it is physically impossible for your data to leak.
2. Symmetric vs. Asymmetric Encryption (Public/Private Keys)
The choice: Symmetric (Shared Secret). Why? Asymmetric often requires a central server to exchange public keys or manage a complex keychain. Symmetric is decentralized by nature: it allows a group to agree on a "Code + Phrase" in person (offline) and use it immediately.
📖 Tactical Usage Scenarios (Evolving Protocols)
The immense strength of Tadpole's symmetric system is that it allows for the creation of undecipherable rotating protocols without ever communicating the password over a network.
The Literary Protocol: Two allies own the same physical edition of "Madame Bovary". They agree on a rule:
PIN = The page number read that day (e.g., 0042).
Phrase = The first complete sentence on that same page.
Advantage: The password changes every day as they read, without either of them having to send the code via SMS.
The Geographic Calendar Protocol: A couple buys the same landscape photo calendar for the year.
PIN = The current day and month (e.g., March 14th = 1403).
Phrase = The name of the city on the photo of the month + a fixed password (e.g., "Kyoto Cherry Blossoms Alpha").
Advantage: A daily rotation of the seed (PIN) and monthly rotation of the entropy (Phrase), totally untraceable from the outside.
The Personal Vault (Cloud Notes): Tadpole is not just for communicating! Do you use Evernote, Notion, or Google Keep? Encrypt your passwords, private journals, or sensitive memos with Tadpole before pasting them into your Cloud. Even if the company's servers are hacked, your notes will remain undecipherable.
🔒 Security Evaluation
✅ Neutralized Attack Vectors (Strengths)
Man-In-The-Middle (MITM): Totally ineffective. If an ISP, a public Wi-Fi router, or Discord's servers intercept the message, they only obtain noise.
Behavioral Analysis (AI): The encrypted data is pseudo-random. AI for moderation, censorship, or advertising profiling are blinded.
Data Siphoning (Cloud Leak): 100% offline application. No database to hack.
⚠️ Limitations (The Human Factor)
Operational Security (OPSEC): The vault's robustness depends on how you hide the key. If you send your Master Phrase in plain text via SMS to your recipient, the encryption is void. Transmit your keys by word of mouth.
Brute-Force Attack: If your phrase is too obvious ("I eat an apple") or too short, a computer could attempt all dictionary combinations.
Solution: It is a simple system but one of absolute robustness if the user does their part. Choose an absurd and complex phrase, and change it periodically with your contacts.
🚀 Quick Usage
The Tadpole Cipher interface is designed to be mastered in less than 10 seconds. The application is divided into two distinct spaces.
Step 1: The Identification Airlock (Home)
1. Open the app.
2. Enter your PIN Code (4 digits). (You can click the eye icon to hide/reveal entry).
3. Enter your Master Phrase (3 words minimum, spaced).
4. Once the security condition is met, the pulsing "Private Connectivity" icon appears. Click it to access the terminal.
Step 2: The Tactical Terminal (Cipher)
Paste the plain text (or the encrypted text received from a friend) into the large top box. (A "Paste" icon is available at the top right).
Press ENCRYPT (to lock) or DECRYPT (to read). The background fluid and sound feedback will validate the operation's success.
The result appears in the bottom box. Click the Copy icon (bottom right) to send it wherever you wish!
⚠️ Legal Warning
This project is published as open-source for strictly educational and research purposes. It was designed to demonstrate the effectiveness of symmetric cryptography principles, decentralized software architecture, and the integration of real-time graphical shaders in Flutter.
The author declines any responsibility for the use of this tool in illegal contexts, or for the transmission of critical/vital data. Remember that absolute security does not exist in computing, and the weak link is always the human.
