Network security, no blind spots.
A community radio network shouldn't be an act of faith. Here's exactly what LarrunKonnect encrypts, what's exposed, and what an attacker — friendly or not — can actually attempt.
Three properties to uphold, all at once.
In cybersecurity, a system isn't judged on "is it secure" but on three independent axes. Here's where LarrunKonnect stands on each one.
AES-256, the industry standard.
Every LarrunKonnect channel (for example FAMILLE-AZK) is protected by a symmetric key, AES-256 in CTR mode. It's the algorithm chosen by NIST (FIPS 197), used by banks, by the US military for documents classified TOP SECRET, TLS 1.3, WPA3, Signal, and iMessage.
To brute-force an AES-256 key, you would need to try up to 2256 ≈ 1.16 × 1077 combinations. At 1018 attempts per second (the power of an exascale supercomputer dedicated solely to this task), it would take 3.7 × 1051 years — that's 1041 times the age of the universe.
Even quantum cryptanalysis (Grover's algorithm) only reduces the effective security to 128 bits, which remains out of reach for at least the next century.
Modern cryptography isn't broken — it's bypassed. The only realistic way to intercept a LarrunKonnect message is to steal the key: scanning the QR code, gaining access to the paired phone, a shared screenshot. Guard your key like a set of house keys.
Anatomy of an encrypted LoRa packet
▸ In the clear (metadata): source address and packet identifier — needed for routing.
▸ Radio frame: sync preamble and CRC, common to every LoRa transmission.
Can the network be shut down?
Saturating the 868 MHz band
A powerful transmitter can locally prevent nodes from hearing each other. It's the radio equivalent of a DDoS.
Flooding the mesh with packets
A rogue node transmitting continuously can hog the airtime and overwhelm neighbours' queues.
Can a message be altered or replayed?
Replay Attack
An attacker captures "Open the gate" and replays it later. Without protection, the gate would open.
✓ 5-minute deduplication cache
✓ Timestamp checked
Fake message injection
Forging a message that appears to come from another node on the channel.
✓ Decryption produces noise ⇒ rejected
✓ Implicit MAC via CTR mode + ID
Every attack vector, laid bare.
Our RedTeam approach: nothing hidden. Here are the seven known attacks against a Meshtastic network, their real risk for LarrunKonnect, and the mitigation.
An honest comparison with what we use every day.
The Offensive Security take.
LarrunKonnect, built on Meshtastic and LoRa, is cryptographically stronger than an SMS (which travels in the clear over SS7), more resilient than the Internet in the face of a targeted outage, and more privacy-respecting than a "free" app that harvests your contact list.
It isn't a tool for discussing state secrets — it was never meant to be. It's a local, low-key tool, whose security is legible: everything is documented, the code is open, the trade-offs are named. No black box, no marketing promises.
"The best security is the kind you understand."