Technical Overview

NetSepio’s protocol dVPN implementation Erebrus, utilizes the robust WireGuard protocol to establish a secure and anonymous tunnel for user traffic. Here's a breakdown of the key technical aspects:

Modern Cryptography:

WireGuard employs state-of-the-art cryptographic primitives to ensure data confidentiality and integrity. These include:

• ChaChaPoly for Encryption: This high-performance stream cipher offers strong encryption with excellent performance, making it ideal for resource-constrained devices.

• Curve25519 for Key Exchange: This elliptic curve cryptography scheme facilitates secure key exchange between user devices and dVPN nodes, eliminating the need for pre-shared secrets or certificates.

• Poly1305 for Message Authentication: This message authentication code ensures data hasn't been tampered with during transmission, protecting against potential man-in-the-middle attacks.

Distributed Network:

Unlike traditional VPNs with centralized servers, NetSepio leverages a network of geographically distributed nodes. User data is encrypted and routed through multiple nodes, obfuscating the origin and destination of traffic, enhancing anonymity.

• LibP2P: Our innovative solution is aimed at revolutionizing internet privacy and security. At its core, the project leverages the power of peer-to-peer communication facilitated by libp2p, a cutting-edge networking protocol. This framework enables seamless communication among network participants while prioritizing security and decentralization.

• Pub-Sub: Utilizing libp2p's pubsub (publish-subscribe) mechanism, Erebrus facilitates communication channels among network participants and helps to disseminate critical updates and notifications to all nodes in the network. Erebrus Gateway publishes updates to designated topics, while nodes subscribe to these topics to receive relevant information in real-time. This pubsub-based communication model ensures that all nodes are kept informed of important network events and policy changes, fostering a cohesive and responsive network ecosystem.

• DHT: Erebrus harnesses libp2p's Distributed Hash Table (DHT) implementation for peer discovery and routing. DHT enables nodes to locate and connect with other peers by storing key-value pairs distributed across participating nodes. This decentralized approach ensures robust connectivity even without centralized infrastructure, enhancing network resilience.

• Node Discovery: Additionally, the project leverages libp2p's Rendezvous mechanism for bootstrap node discovery. Rendezvous enables nodes to discover initial peers by broadcasting queries to the network and receiving responses from nearby nodes. This ensures that new nodes can quickly join the network and establish connections with existing peers, facilitating network growth and resilience.

• QUIC: Furthermore, libp2p's support for various transport protocols, including TCP/IP, WebSockets, and QUIC, ensures compatibility and interoperability across different network environments. This flexibility allows the decentralized VPN service to adapt to diverse networking conditions while maintaining a high level of performance and reliability.

Auth Key Management

Erebrus employs a secure authentication key management system to enhance security and privacy. Each Erebrus node generates a private key that never leaves the device and is used to create PASETO (Platform-Agnostic Security Tokens). PASETO ensures authenticated and authorized communication with Erebrus nodes, preventing unauthorized access and strengthening network security.

VPN Client Connectivity

In the Erebrus mobile app or web app, a secure key management system ensures robust privacy and security. Each user device generates its own private key locally, which never leaves the device. The corresponding public key is used to register the client with a specific node.

This client-side key generation ensures that even if a node is compromised, user data remains encrypted and secure, preventing unauthorized access to private communications.

Dynamic Tunneling:

Erebrus offers a sophisticated solution for secure and efficient internet connectivity. When users activate the VPN, connections are not simply routed through a static, single channel. Instead, NetSepio dynamically establishes tunnels using a pool of available active nodes spread across a geographical location. This innovative and flexible approach to VPN connectivity is specifically designed to intelligently distribute the traffic load across the entire network.

By having multiple pathways at its disposal, the dVPN effectively balances the network demand, which reduces the risk of any single node becoming a bottleneck. This method greatly enhances both the performance and efficiency of the network, providing a more consistent and reliable connection for users. The dynamic load distribution also significantly improves latency, which is critical for applications requiring real-time data transmission, such as video conferencing, online gaming, or financial transactions.

This dynamic tunneling mechanism enhances resilience against node failures and cyberattacks. If a node becomes unavailable, traffic is seamlessly rerouted to an alternate, functional node with minimal disruption, ensuring optimal network performance and low latency.