Architecture & Operation — CryptPeer®

Discover CryptPeer® architecture: from Raspberry Pi 5 to enterprise server, autonomous self-hosted relay server, multi-platform clients, local and remote access modes.

Created on : 11/14/2025 Last updated : 11/14/2025 Version : 1.0 Status : Published

Architecture & Operation

CryptPeer® is designed to start from a microcomputer and scale to your largest platforms — from Raspberry Pi 5 to enterprise server, NAS and VPS.

Autonomous Relay Server

The relay server plays a blind transit role: it never sees plaintext. The database and metadata are encrypted upstream.

Compatible with:

  • Raspberry Pi 5 (minimum configuration)
  • Intel/AMD Mini-PC
  • Desktop PC
  • NAS (Network Attached Storage)
  • Linux VPS (Virtual Private Server)

Sovereignty through Independence

CryptPeer® works on any Linux-compatible computer. No dependency on a specific brand.

Compatible with:

  • Any Linux computer (Raspberry Pi, mini-PC, PC, NAS, VPS)
  • Sovereign hardware (KUBB, DataShielder, etc.)
  • Energy-autonomous solutions
  • Standard market hardware

Absolute sovereignty: Zero hardware dependency, zero intermediary, zero delegation. You control your infrastructure.

Partnership: As part of a partnership with Bleu Jour, we test and recommend their mini-computers, without exclusivity.

EviEngine — Hardware-Based License

Freemindtronic's EviEngine technology embedded in CryptPeer® for license management without servers or databases.

Features:

  • Hardware-based license: Motherboard serial number, not based on a person's identity
  • No server or database: Operates locally, without dependency on external services
  • Offline operation: CryptPeer® can operate in local network without Internet connection
  • Preserved anonymity: Since the license is linked to hardware and not identity, anonymity is preserved

Enhanced sovereignty: CryptPeer® can operate in local network even offline, with an economic model independent of external services.

Clients — All Devices

Works on all devices worldwide — nothing to install

  • Computer, phone, tablet
  • Smart TV, media
  • Ultra mobile, immediate use
  • Multilingual offline interface (14+ languages)

Maximum interoperability:

Compatible with 60+ web browsers (Chrome, Firefox, Safari, Edge, Opera, Brave, Vivaldi, and all their forks). Works on smart TVs (Samsung, LG, Android TV), consoles (PlayStation, Xbox, Switch), and embedded systems. No competitor offers this exhaustive compatibility. Full list →

HSM

Secure storage of secrets with master passphrase > 256 bits.

  • PassCypher NFC HSM (Android NFC)
  • PassCypher HSM PGP (PC)

Access Modes

Local-Only

Closed network (private Wi-Fi AP), without SIM/Internet. Operates entirely locally, ideal for secure environments or in case of WAN blocking/censorship.

Autonomous closed network

No Internet connection required

Remote Access

Firewall/router configuration (NAT / reverse proxy) + domain name/subdomain for Let's Encrypt.

Let's Encrypt (SSL/TLS)

Alternative: DuckDNS + Nginx

Compatibility & Portability

Linux

Raspberry Pi 5, mini-PC, PC, NAS, VPS

Low consumption

Minimal hardware footprint

Portable

Easy to move format

Hardware Details & Consumption

Sizing according to your needs: CryptPeer® usage limits are primarily related to processing load from simultaneous group videoconferences and/or multiple simultaneous individual videoconferences, as well as relay buffer storage on the server. It is essential to understand your company's needs to choose the best hosting configuration, whether fixed or mobile on a mini-computer.

Raspberry Pi 5

Weight (Complete Set)

~120 g

Board + ventilated case (indicative value)

Annual Consumption

~35 kWh/year

Continuous 24/7 usage

Estimated Annual Cost

~€8.10

Average electricity rate

Power Consumption

Operating State Consumption (Watts) Details
Idle 2.4 to 3.3 W Without connected peripherals
Maximum load 9 W Intensive use (computing, video, etc.)
Estimated average usage 4.0 W Typical operation over a day

Configurations Tested by Freemindtronic

The configurations below have been tested and validated by Freemindtronic to give you a clear vision of performance and power consumption. These data are essential since the server runs 24/7, and consumption can prove less costly than external hosting.

KUBB Secure Mini Fanless

Fanless mini-computers (no fan), ideal for environments requiring silence, reliability, and regulatory compliance (GDPR, NIS2, CSA, DORA). Tested and validated by Freemindtronic as part of our partnership with Bleu Jour.

KUBB Secure Mini (N150)

Standard configuration

Processor

Intel® N150 (4 Cores, 4 Threads, 3.6 GHz)

Memory

16 GB LPDDR5 4800 MHz

Storage

SSD M.2 NVMe PCIe 256 GB

Network

Wi-Fi 6 AX201, Bluetooth® 5.2, Ethernet 1Gbps

Power Supply

AC-DC 12V 2.5A 30W Type-C

Security

PassCypher HSM PGP pre-installed (30 days free)

Dimensions & Weight

8 cm × 8 cm × 8 cm — ~500 g

KUBB Secure Mini (i3-N300)

High performance configuration

Recommended for intensive video

Processor

Intel® Core™ i3-N300 (8 Cores, 8 Threads, 3.8 GHz)

Memory

16 GB LPDDR5 4800 MHz

Storage

SSD M.2 NVMe PCIe 256 GB

Network

Wi-Fi 6 AX201, Bluetooth® 5.2, Ethernet 1Gbps

Power Supply

AC-DC 12V 2.5A 30W Type-C

Security

PassCypher HSM PGP pre-installed (30 days free)

Dimensions & Weight

8 cm × 8 cm × 8 cm — ~500 g

Sizing Guide

Raspberry Pi 5

Ideal for small teams, basic usage (messaging, file transfers). Limited for multiple simultaneous videoconferences.

KUBB N150

Standard configuration for businesses. Supports multiple simultaneous individual videoconferences. GDPR/NIS2 compliance.

KUBB i3-N300

High performance: simultaneous group videoconferences, multiple individual videos. Double processor performance vs N150.

Factors to consider: Number of simultaneous users, frequency of group videoconferences, required buffer storage volume, mobility needs (fixed vs mobile), and regulatory compliance.

Economics & Power Consumption

Economic Comparison: Self-Hosting vs External Hosting

Self-Hosting

Raspberry Pi 5 (example)

Estimated annual cost:

~€8.10

Consumption: ~35 kWh/year

  • Initial investment: ~€100-150
  • Total control of infrastructure
  • No monthly subscription
  • Data hosted locally
External Hosting

VPS / Cloud (example)

Estimated annual cost:

~€120-600

Subscription: €10-50/month

  • Recurring monthly subscription
  • Dependency on provider
  • Data hosted with third party
  • Variable costs based on usage

Return on investment: With a Raspberry Pi 5, the initial investment is amortized in less than 2 months compared to basic external hosting. For more powerful configurations (KUBB), amortization is generally achieved in 6-12 months depending on the level of external hosting compared.

24/7 Power Consumption: Real Impact

The power consumption of a server running 24/7 may seem significant, but it generally remains negligible compared to external hosting costs. Here are some concrete examples:

Raspberry Pi 5

~35 kWh/year

~€8.10/year

KUBB N150

~65 kWh/year*

~€15/year*

KUBB i3-N300

~80 kWh/year*

~€18/year*

Note: Values marked with an asterisk (*) are estimates based on an average consumption of 7-9W in continuous operation. Actual values may vary depending on usage and configuration.

Deployment & Resilience

Immediate Deployment

Fully autonomous solution, integrates into any existing infrastructure.

  • Operates on local closed network
  • Remotely accessible (optional)
  • Minimal configuration required

Resilience & Continuity

Architecture designed for service continuity.

  • Server-hopping: Manual switching to another relay (via Server Manager) — automation planned
  • Multi-instances: Difficult to detect/stop
  • No third-party dependency: No VPN or external service required

CryptPeer Ecosystem: Complementary Products

To complete your CryptPeer® infrastructure and optimize security, backup, and data restoration, several complementary products are available. These solutions integrate perfectly with CryptPeer to offer a complete security ecosystem.

KUBB Secure Mini Fanless

CryptPeer Hosting

Fanless mini-computer (N150 or i3-N300) ideal for hosting your CryptPeer® server. Absolute silence, low consumption, GDPR/NIS2 compliance.

PassCypher HSM PGP pre-installed

16 GB RAM, 256 GB NVMe SSD

Consumption: ~7-9W

Discover KUBB Secure Mini

EviKey NFC Secure

Backup & Storage

Contactless secure USB drives to store your CryptPeer® backups (conversation threads, encrypted files). Secure contactless access control. Hardened to the extreme, waterproof.

Premium: USB2 ultra 8/16/32/64/128 GB

Pro: USB2 ultra 8/16/32/64/128 GB

Conversation restoration

PassCypher HSM PGP

PC Access Security

HSM password manager to secure access to CryptPeer® on computer. Passphrases >256 bits, TOTP secret keys, secure 2-click connection.

Passphrases >256 bits

TOTP secret keys

2-click connection

Discover PassCypher HSM PGP

PassCypher NFC HSM

Android Access Security

NFC HSM password manager to secure access to CryptPeer® from your Android phone. NFC compatible, passphrases >256 bits.

Lite: Personal use

Master: Professional use

Secure NFC connection

Complementary use cases:

  • Backup & Restoration: Use EviKey NFC to backup your CryptPeer® conversations and encrypted files. Quick restoration in case of data loss.
  • Enhanced access security: PassCypher HSM PGP (PC) and PassCypher NFC HSM (Android) allow securing access to CryptPeer® with passphrases >256 bits and TOTP secret keys.
  • Complete infrastructure: KUBB Secure Mini Fanless to host CryptPeer® in a silent, energy-efficient, GDPR/NIS2 compliant environment.