Skip to content
TossToss

Architecture

Architecture

Section titled “Architecture”

Toss uses a hybrid architecture for optimal performance and reliability.

System Overview

Section titled “System Overview”
graph TB
    A[Device A<br/>Flutter] <-->|P2P QUIC| B[Device B<br/>Flutter]
    A -->|Fallback| R[Relay Server]
    B -->|Fallback| R

    style A fill:#4a90e2,stroke:#2c5aa0,color:#fff
    style B fill:#4a90e2,stroke:#2c5aa0,color:#fff
    style R fill:#50c878,stroke:#3a9d5f,color:#fff

Core Components

Section titled “Core Components”

Rust Core

Section titled “Rust Core”

Handles encryption, networking, and clipboard operations:

  • Crypto: X25519 key exchange, AES-256-GCM encryption
  • Network: mDNS discovery, QUIC P2P, relay client
  • Clipboard: Platform-specific clipboard access
  • Storage: SQLite for device and history storage
  • Protocol: Message serialization and wire protocol

Flutter UI

Section titled “Flutter UI”

Cross-platform user interface:

  • Services: TossService, NotificationService, etc.
  • Providers: State management with Riverpod
  • Features: Home, Pairing, History, Settings screens
  • FFI Bridge: Communication with Rust core

Relay Server

Section titled “Relay Server”

Optional fallback for remote sync:

  • WebSocket-based message relay
  • Zero-knowledge (only sees encrypted blobs)
  • Self-hostable

Communication Flow

Section titled “Communication Flow”

  1. Device Discovery

    • mDNS broadcast on local network
    • Relay server registration for remote access

  2. Connection Establishment

    • Try direct P2P connection first (QUIC/UDP)
    • Fall back to relay server if P2P fails
    • NAT traversal using STUN/TURN-like techniques

  3. Data Synchronization

    • Clipboard change detection
    • Encrypt content with session key
    • Transmit to paired devices
    • Decrypt and update local clipboard

Security Architecture

Section titled “Security Architecture”
  • X25519 key exchange for secure device pairing
  • AES-256-GCM authenticated encryption for all data
  • Ed25519 signatures for device identity
  • Zero-knowledge relay: The relay server only sees encrypted blobs
  • Forward secrecy: Session keys are rotated regularly

Storage Architecture

Section titled “Storage Architecture”
  • Device Storage: SQLite database for paired devices
  • History Storage: Encrypted local clipboard history
  • Key Storage: Platform secure storage (Keychain, Credential Manager)

Next Steps

Section titled “Next Steps”