Security Specifications 🔒

Cryptographic security, WebRTC DTLS/SRTP encryption, and room isolation architecture.

WebRTC DTLS 1.2 & SRTP Encryption

All WebRTC `RTCDataChannel` connections are end-to-end encrypted using Datagram Transport Layer Security (DTLS) and Secure Real-time Transport Protocol (SRTP). Third parties cannot eavesdrop on file contents in transit.

Random Room Tokens & Code Hashing

Room identifiers are cryptographically generated. Room token hashes and peer ID hashes prevent unauthorized access or session spoofing across rooms.

SHA-256 Checksum Integrity

Before files are transmitted, the sender calculates a SHA-256 hash using the Web Crypto API (`crypto.subtle`). The receiver recalculates the hash upon arrival to verify bit-perfect integrity.