Is Briar end-to-end encrypted?
Yes — Briar end-to-end encrypts every chat by default, using Bramble protocol suite (BTP/BHP) — XSalsa20-Poly1305 AEAD, keyed BLAKE2b KDF. Its handshake is not yet post-quantum, so traffic captured today could be decrypted later by a quantum computer.
End-to-end encryption protects message contents — but not necessarily metadata. Briar's metadata model is Strong — no servers store metadata; internet sync runs over Tor v3 hidden services, hiding IP/relationship metadata. Contact graph and message content live only on-device.. Compare it directly with RVNT, which is E2EE by default with a post-quantum handshake and no central server: RVNT vs Briar.