Niobium Arrives encrypted · Stays encrypted · Leaves encrypted

Satellite images near a point, privately

Pick a point in Las Vegas and get the overhead images taken near it. Alice, who searches the image positions, never learns the point, the radius or the results. Bob, who holds the images, cannot tell your request from the decoys sent with it.

1

Choose a point and a radius

Click anywhere on the map; the shaded area is where there are images. The point is encrypted in this browser before it is sent. The radius is applied here after decrypting, so no server ever sees it.

Downloading the whole street map once (0%) so no map request reveals where you look…
No point chosen yet.
Loading…
2

The encrypted search

Encrypting your map point in this browser
Alice measuring the distance to every tile, still encrypted
Decrypting the distances and applying your radius here
Fetching the images from Bob, hidden among decoy groups
In your browserplaintext
—
What Alice receivesciphertext
—
Alice sees only the encrypted point and returns the distance to every tile still encrypted: she cannot tell where you clicked or which tiles are close. Bob receives one request for 8 groups of 5 neighbouring tiles, shuffled together; only one group is real.
3

Results

Results appear here after a search.

What Bob sees

While this page is open it sends Bob one request every 10 s, whether or not you are searching. Each request is 8 groups of 5 neighbouring tiles, shuffled together. Most requests are decoys only. When you search, your request waits for the next slot and takes that slot's place, with your real group hidden among 7 decoy groups. Bob sees the same steady stream either way, so he can tell neither when you searched nor where.

Advanced — server endpoints