Datasheet
Tahaa
A home box for a SIM card: it passes the SIM’s calls and texts to the Tahaa app, over the internet.

The box
- Size
- 95 × 115 × 16 mm
- SIM
- Nano-SIM (4FF), physical SIM card
- Mobile network
- 4G LTE Cat 1 with VoLTE; 3G; 2G
- LTE bands
- 1, 3, 5, 7, 8, 20, 28, 38, 40, 41
- Wi-Fi
- 2.4 GHz, 802.11 b/g/n
- Bluetooth
- Bluetooth Low Energy, for setup only
- Power
- USB-C, 5 V; charger and cable included
- Status light
- Colour light: online and signal, call, setup, problems
- Processor
- Dual-core 240 MHz, 16 MB flash, 8 MB RAM
Calls and texts
- Calls
- In and out, from your own number; ring on a locked phone
- Texts
- SMS in and out, long messages, picture messages (MMS)
- Keypad
- Keypad tones during a call (voicemail, menus, codes)
- Voice
- Mobile-network voice quality, carried to the app with the Opus codec
- Operators
- Sets itself up for the SIM inserted: no settings to enter
- Where
- The box: European Union and countries on the same bands. You: anywhere with internet
The apps
- iPhone
- iOS 17 or later
- Android
- Android 8.0 or later
- Web
- A recent browser (Chrome, Safari, Firefox, Edge)
- Several phones
- Sign in on as many phones as you like; several Tahaa on one account
- Languages
- English, French
The service
- Account
- Your email address (sign-in by emailed code)
- Hosting
- Google Cloud, Paris (France)
- Your data
- Kept until you delete it; deleting the account deletes everything
- Internet
- The box needs Wi-Fi; your phone needs Wi-Fi or mobile data
Security
Every mechanism is built in and automatic: there is nothing to configure, and no key or setting a user could weaken.
- Calls
- End-to-end encrypted between the box and your phones: a new key for every call (HPKE: X25519, HKDF-SHA-256, ChaCha20-Poly1305), audio frames in AES-128-GCM
- Keypad
- Digits typed during a call encrypted end to end (AES-256-GCM)
- Messages
- SMS and MMS encrypted end to end between the box and your devices: a key for every message (ChaCha20-Poly1305), sealed for each device (HPKE)
- Notifications
- Encrypted for the receiving phone (HPKE) and signed by the service (Ed25519): Apple and Google can’t read them
- Box identity
- An Ed25519 key made by the box at first start, never leaving it
- Connections
- TLS for everything; WebRTC media in DTLS-SRTP
- Firmware
- Secure boot and signed updates (RSA-3072); flash memory encrypted (AES-XTS-256)
- On the phone
- Keys in the system’s secure storage (iOS Keychain, Android Keystore)
Tahaa · Wylmi SAS, Paris · contact@wylmi.com · tahaa.app · The brochure