Is Olvid Open Source?


Yes 😎.

The source code of the iOS and Android applications are available on Olvid’s public GitHub.

A documented technology

  1. Our cryptographic protocols are fully available and published here.

  2. In addition, they have been formally and independently validated by Michel Abdalla, an Adjunct Professor at ENS (École Normale SupĂ©rieure - PSL), CNRS Senior Researcher and Chairman of the Board of IACR (International Association for Cryptologic Research).

    • The full source codes have been made available to Mr. Abdalla so that he can validate the protocols as they are actually implemented.

    • The article formalizing his results is published in this IACR ePrint.

  3. Olvid is the first and only instant messenger to have received one (then two!) Security Visas (CSPN certifications) issued by ANSSI.

    • The iOS and Android versions of Olvid have received these CSPNs following an audit by Synacktiv. This ITSEC (Information Technology Security Evaluation Center) received and evaluated the complete source code of Olvid’s iOS and Android clients

    • Security scope, certification reports and ANSSI certificates are available here for iOS and here for Android.

    • In a rare move for transparency, we are also publishing the two Technical Evaluation Reports (fr) produced by the excellent team at Synacktiv :

  4. In addition, Olvid’s code is currently the subject of a public Bug Bounty program via the Yes We Hack platform. This means that we have officially allowed hunters (attack experts) to attack our iOS and Android implementations of Olvid. If a flaw is discovered, we fix it and pay the victorious hunter. This makes Olvid more secure, the hunter is happy, life is good 🌈.