PSYCH

E2EE Terminal Pipe
Relay Online

Zero-knowledge, peer-to-peer authenticated message pipe mediated by an in-memory blind WebSocket relay.

Relay: Blind & Ephemeral
Crypto: X25519 & SPAKE2 PAKE
AEAD: ChaCha20-Poly1305
Persistence: None (RAM-Only)

Quick Install

Install the pre-compiled static binary on Linux, macOS, or Raspberry Pi directly from this server:

Terminal Shell 
curl -fsSL https://psych.mountmerlin.com/install.sh | sh
Tip: Set export PSYCH_RELAY="wss://psych.mountmerlin.com/ws" in your shell profile to avoid passing --relay each time.

Usage & Pairing

1
Start a Session
Initiates an encrypted room, prints a compact terminal QR code and an 8-character human code.
Host Machine 
psych session --relay wss://psych.mountmerlin.com/ws
2
Join via Short Code
Pairs securely using SPAKE2 PAKE. Blind to the relay and completely immune to offline dictionary attacks.
Peer Machine 
psych join 7K4M-9P2X --relay wss://psych.mountmerlin.com/ws
Unix Pipeline Integration

Pipe arbitrary streams or file payloads directly between decoupled systems over standard input and output:

Send Data (Producer) 
echo "top secret token" | psych send 7K4M-9P2X --relay wss://psych.mountmerlin.com/ws
Receive Data (Consumer) 
psych recv --relay wss://psych.mountmerlin.com/ws > received_payload.txt

Security & Architecture

Component Specification
Key Agreement X25519 (ECDH) & SPAKE2 (PAKE on Ed25519)
Key Derivation HKDF-SHA256 (psych-v1-session-key)
Authenticated Encryption ChaCha20-Poly1305 (RFC 8439 AEAD)
Directional Nonces 12 bytes (1-byte direction bit + 3-byte zeros + 8-byte monotonic counter)
Relay Protocol Blind WebSocket message forwarder; maximum 2 peers per room; zero disk storage

Relay Endpoints

Path Description
GET / Service overview and web portal
GET /install.sh Embedded shell installer for psych CLI
GET /healthz Health check endpoint (returns HTTP 200 OK)
GET /ws?sid=<id> Blind bidirectional WebSocket room endpoint