System Design

End-to-End Encrypted Key Exchange

System Design diagram · made in Skemio

Cryptographic architecture depicting Alice requesting Bob's pre-key bundle from a key server, establishing a shared secret, and sending Double Ratchet encrypted messages.
Cryptographic architecture depicting Alice requesting Bob's pre-key bundle from a key server, establishing a shared secret, and sending Double Ratchet encrypted messages.

What it shows

  • X3DH creates shared secrets using pre-published public key bundles
  • The server routes ciphertext without accessing private key halves
  • The Double Ratchet derives new ephemeral keys for each message

The takeaway

Pre-key bundles initiate sessions offline; the double ratchet guarantees forward secrecy and break-in recovery.

More system design diagrams