Tahaa

Datasheet

Tahaa

A home box for a SIM card: it passes the SIM’s calls and texts to the Tahaa app, over the internet.

The Tahaa box

The box

Size
95 × 115 × 16 mm
SIM
Nano-SIM (4FF), physical SIM card
Mobile network
4G LTE Cat 1 with VoLTE; 3G; 2G
LTE bands
1, 3, 5, 7, 8, 20, 28, 38, 40, 41
Wi-Fi
2.4 GHz, 802.11 b/g/n
Bluetooth
Bluetooth Low Energy, for setup only
Power
USB-C, 5 V; charger and cable included
Status light
Colour light: online and signal, call, setup, problems
Processor
Dual-core 240 MHz, 16 MB flash, 8 MB RAM

Calls and texts

Calls
In and out, from your own number; ring on a locked phone
Texts
SMS in and out, long messages, picture messages (MMS)
Keypad
Keypad tones during a call (voicemail, menus, codes)
Voice
Mobile-network voice quality, carried to the app with the Opus codec
Operators
Sets itself up for the SIM inserted: no settings to enter
Where
The box: European Union and countries on the same bands. You: anywhere with internet

The apps

iPhone
iOS 17 or later
Android
Android 8.0 or later
Web
A recent browser (Chrome, Safari, Firefox, Edge)
Several phones
Sign in on as many phones as you like; several Tahaa on one account
Languages
English, French

The service

Account
Your email address (sign-in by emailed code)
Hosting
Google Cloud, Paris (France)
Your data
Kept until you delete it; deleting the account deletes everything
Internet
The box needs Wi-Fi; your phone needs Wi-Fi or mobile data

Security

Every mechanism is built in and automatic: there is nothing to configure, and no key or setting a user could weaken.

Calls
End-to-end encrypted between the box and your phones: a new key for every call (HPKE: X25519, HKDF-SHA-256, ChaCha20-Poly1305), audio frames in AES-128-GCM
Keypad
Digits typed during a call encrypted end to end (AES-256-GCM)
Messages
SMS and MMS encrypted end to end between the box and your devices: a key for every message (ChaCha20-Poly1305), sealed for each device (HPKE)
Notifications
Encrypted for the receiving phone (HPKE) and signed by the service (Ed25519): Apple and Google can’t read them
Box identity
An Ed25519 key made by the box at first start, never leaving it
Connections
TLS for everything; WebRTC media in DTLS-SRTP
Firmware
Secure boot and signed updates (RSA-3072); flash memory encrypted (AES-XTS-256)
On the phone
Keys in the system’s secure storage (iOS Keychain, Android Keystore)

Tahaa · Wylmi SAS, Paris · contact@wylmi.com · tahaa.app · The brochure