Calls (Dev)¶

Scope¶

This folder documents call flows and security for:

• 1-1 calls (audio/video)
• Group calls (audio/video)
• Join / Rejoin

It intentionally excludes LiveKit SDK media transport internals.

Security Highlights¶

• Identity verification: Key Transparency proofs + local trust cache
• Media encryption: AES-256-GCM
• Key agreement (preferred): P-256 (secp256r1) via Secure Enclave
• Fallback/legacy: RSA-2048 (RSA-OAEP-SHA256)
• Transport security: SSL public-key pinning enforced in Production

Call Docs (folder-based)¶

• 1-1 calls: one-to-one.md
• Group calls: group-call.md
• Join & Rejoin: join-rejoin.md
• Call E2EE details: e2ee.md

Diagrams¶

• 1-1 flow: one-to-one-flow.md
• Group call flow: group-call-flow.md
• Join/Rejoin flow: join-rejoin-flow.md

Backend Actions¶

• Start a call.
• Invite more participants.
• Request and accept rejoin.
• Reject or cancel before joining.
• Fetch participant state for UI reconciliation.