OPEN SOURCE • END-TO-END • P2P

Transfer files. Directly.

No cloud. No accounts. No limits.Not one byte through Pike.
Pike Logopike
Direct mode•••
↑ SEND
📄
Drop files here
or click to browse
📄ubuntu-22.04-desktop.iso
4.48 GB
📄vacation-2024.zip
2.12 GB
📄family-video.mp4
1.37 GB
3 files (7.97 GB)7.97 GB
river-coral-frost
↓ RECEIVE
SAFETY NUMBER
482 913
Ask the sender to verify this number matches.
------------------------------------------------------------------------------------------------------------------------
+
+
+
+
INSTALL THE CLI

Fast and scriptable.

$ cargo install pike
🐧>
# or download prebuilt binaries from GitHub releases
+
+
+
+
🔒

End-to-end encrypted

Your files are encrypted on your device and never leave in plaintext.

+
+
+
+
🛡️

Post-quantum ready

Hybrid ML-KEM-768 + X25519 key exchange for future-proof security.

+
+
+
+

Blazing fast

Direct peer-to-peer WebRTC DataChannels operating at line speed.

+
+
+
+
#

No middleman

No storage servers. No cloud relays. Direct browser-to-browser pipe.

------------------------------------------------------------------------------------------------------------------------
HOW PIKE WORKS
Protocol details →
1
📄

Choose files

Pick any file or folder to initiate a direct peer transfer session.

------>
2
</>

Share code

Share the human-readable 3-word code with your receiver.

------>
3
🛡️

Verify safety number

Match the 6-digit SAS verification code to eliminate MITM risk.

------>
4
🚀

Direct stream

Encrypted chunks stream directly browser-to-browser via WebRTC.

------------------------------------------------------------------------------------------------------------------------
ARCHITECTURE & PROTOCOL

Engineered for zero-trust security.

Key Exchange Architecture

Pike executes a hybrid post-quantum key exchange combining X25519 elliptic-curve Diffie-Hellman with Kyber-768 (ML-KEM) lattice-based cryptography, protecting against current interception and future quantum decryption.

Symmetric Stream Cipher

Symmetric payload encryption uses ChaCha20-Poly1305 AEAD with unique per-chunk nonces derived via BLAKE3 key derivation function, guaranteeing confidentiality and integrity.

Short Authentication String (SAS)

To eliminate active Man-in-the-Middle (MITM) attacks, both peers render a 6-digit Short Authentication String derived from the mutual key exchange transcript for out-of-band verification.

Ephemereal WebRTC Signaling

Signaling uses short-lived ephemeral key exchanges on Cloudflare Workers. SDP offers and ICE candidates are stored in volatile memory and purged immediately upon connection establishment.