Firefly Is Now Open Source: We Don't Claim, We Prove
Sri Pranav Tene, CEO
Today marks a major milestone for Lupyd and the private software ecosystem. We are proud to announce that Firefly, our end-to-end encryption (E2EE) chat suite's core and client-facing libraries, is officially open source on GitHub at github.com/lupyd/firefly.
Building Trust: We Don't Claim, We Prove
For years, platforms have asked users for blind faith. They put up lock badges and promise privacy in marketing copy, while keeping their cryptographic code hidden away. But true end-to-end encryption is never about trusting a server—it is about mathematical proof that executes directly on the user's device.
By open sourcing Firefly's core engine and client-facing libraries, we eliminate the need for anyone to take our word for how encryption works. Anyone—developers, security researchers, and cryptographers—can inspect the code, audit the key agreement logic, and verify that payloads are encrypted on-device before they ever touch the network.
We don't claim. We prove.
What's Included in the Open Source Release
The open-source repository at github.com/lupyd/firefly contains the full client-side cryptographic and messaging foundation:
1. Firefly Core (Rust)
The core engine handles Messaging Layer Security (MLS) state machines, tree-based key agreement, automated epoch ratcheting, forward secrecy, and post-compromise security. Written in Rust for guaranteed memory safety, it compiles seamlessly across platforms.
2. First-Class WebAssembly (WASM) Support
Firefly compiles to high-performance WebAssembly, bringing native-grade cryptography and MLS group coordination directly to the browser and hybrid environments without sacrificing execution speed or security boundaries.
3. Custom Chat Bots Directly in Encrypted Channels
With Firefly's client libraries and WASM architecture, developers can build interactive custom chat bots and autonomous agents that run client-side. Rather than routing unencrypted messages through centralized third-party servers, bots can join the MLS tree as native participants—processing interactions and responding to users in real time with mathematical E2EE integrity.
4. Client-Enforced Group Governance
Inspect our custom MLS extensions that enforce permissions, channel access, and member roles inside the cryptographic tree state. Governance rules are validated independently by every client device, guaranteeing that even a malicious relay cannot compromise group integrity.
Building the Future of Verifiable Privacy
Open sourcing Firefly is our commitment to transparent engineering and community collaboration. Whether you are building an encrypted messaging client, integrating zero-knowledge communication into an existing product, or creating intelligent on-device chat bots, Firefly provides the cryptographic building blocks you need.
Explore the repository, test the WASM bindings, and build with us:
