Melora — Hide Messages in Music

Encode and decode secret messages as musical note sequences directly in Gmail.

MELORA — HIDE SECRET MESSAGES IN MUSIC Melora brings an entirely new kind of privacy to your email. Instead of obvious encryption that signals "something secret is here," Melora transforms your message into a beautiful sequence of musical notes — hiding it in plain sight where no one would ever think to look. ───────────────────────────────────────── WHY MELORA IS DIFFERENT ───────────────────────────────────────── Every other privacy tool — Signal, PGP, encrypted email — has one fatal flaw: it's obvious. When someone sees an encrypted message, they know a secret exists. In repressive environments, that alone can be dangerous. Border agents, surveillance systems, and deep packet inspection tools are all trained to detect encryption. Melora takes a completely different approach. Your message doesn't look encrypted — it looks like music data. A JSON note sequence shared in an email raises no flags, triggers no algorithms, and attracts no attention. The message isn't just unreadable without the key — its very existence is hidden. This is steganography: hiding the fact that a message exists, not just its contents. ───────────────────────────────────────── WHAT MELORA DOES ───────────────────────────────────────── Melora encodes any text message as a sequence of musical note pairs using the Melography protocol — a cryptographic system where each character maps to a unique pair of musical notes through a passphrase-derived cipher. The same letter maps to completely different notes every time it appears, making frequency analysis impossible. Without the correct passphrase, an observer cannot even locate where the message begins or ends — let alone read it. In Gmail, Melora adds a simple 🎵 Encode button to your compose window. Type your secret message, enter a shared passphrase, click Encode & Insert — and your message becomes a stream of note data sitting quietly in your email. When your recipient opens the email, a 🎵 Decode Melora Message button appears automatically. They enter the passphrase and read your original message. ───────────────────────────────────────── HOW IT WORKS — THE MELOGRAPHY PROTOCOL ───────────────────────────────────────── Melography is a deterministic bidirectional mapping system that converts text into musical note pairs: • 96 printable characters mapped to 130 unique note pairs • Each character uses TWO musical notes — creating rich musical intervals • Polyalphabetic cipher: same character → different notes every time • Passphrase feeds into PBKDF2 key derivation → ChaCha20 stream cipher • Each character position gets a unique cryptographic offset • Message boundaries are hidden — without the key, you cannot find where the message starts or ends • Steganographic padding before and after the message hides its length • The note sequence sounds like real music when played back The result is a system where: ✓ Content is hidden — unreadable without the passphrase ✓ Existence is hidden — message boundaries unlocatable without the passphrase ✓ Length is hidden — padding obscures how long the message is ✓ Frequency analysis is defeated — polyalphabetic mapping ✓ No dedicated infrastructure needed — works over any platform ───────────────────────────────────────── FEATURES ───────────────────────────────────────── ✦ ONE-CLICK ENCODING IN GMAIL Click the 🎵 Encode button in any Gmail compose window. Type your message, enter your shared passphrase, choose to insert as text or download as a file. That's it. ✦ AUTOMATIC DECODE DETECTION When you receive an email containing a Melora note sequence, a 🎵 Decode Melora Message button appears automatically at the top of the email. Enter the passphrase to reveal the hidden message instantly. ✦ LOCAL ENCODING — YOUR MESSAGE NEVER LEAVES YOUR DEVICE All encoding and decoding happens in your browser. Your plaintext message is never transmitted to any server. The passphrase never leaves your device. Only the encoded note sequence — which is meaningless without the key — is inserted into your email. ✦ PASSPHRASE PROTECTION Share a passphrase with your recipient through any channel — a phone call, in person, a previous message. Once established, all future communication using that passphrase is protected. ✦ TRANSPORT AGNOSTIC The encoded note sequence is just text — it works over any platform that can carry text or files. Email, messaging apps, social media posts, SMS. If you can send text, you can send a Melora message. ✦ MUSICALLY AUTHENTIC The note sequences are designed to sound like real music when played back. The Melora web app at melora.qizhonglabs.com lets you hear your encoded message played on piano, strings, music box, harp, or brass. ✦ NO ACCOUNT REQUIRED Install and start encoding immediately. No sign-up, no account, no personal information required. ───────────────────────────────────────── WHO MELORA IS FOR ───────────────────────────────────────── JOURNALISTS AND ACTIVISTS Communicating in environments where encryption is detected, flagged, or illegal. Melora messages pass through surveillance systems as ordinary data files. No Melora-specific traffic pattern exists to block or detect. PRIVACY-CONSCIOUS INDIVIDUALS Anyone who wants genuine privacy without the social signal that comes with obvious encryption. Your communication looks completely ordinary. HUMAN RIGHTS DEFENDERS Operating in regions where encrypted communication attracts unwanted attention. Melora provides plausible deniability — the note sequence is just music data, nothing more. BUSINESSES WITH CONFIDENTIAL COMMUNICATIONS Legal, financial, medical, or strategic communications that require discretion beyond standard email security. CREATIVE USERS Hide personal messages inside music. Send someone a melody that only they can decode. Use it as a novel form of personal expression. ───────────────────────────────────────── PRIVACY AND SECURITY ───────────────────────────────────────── Melora is built on a simple principle: we cannot read your messages even if we wanted to. • All encoding happens locally in your browser • Your message never travels over the network in plaintext • Your passphrase is never stored or transmitted • The extension only accesses mail.google.com to inject buttons • No message history is stored anywhere • No account or personal information is required • HTTPS enforced on all connections Full privacy policy: https://melora.qizhonglabs.com/privacy ───────────────────────────────────────── THE MELOGRAPHY PROTOCOL ───────────────────────────────────────── Melography is an open protocol developed by Dr. Qi Zhong (PhD Biochemistry, Simon Fraser University) combining cryptographic security with musical steganography. Unlike traditional encryption which hides content, Melography hides the existence of communication itself. Key technical properties: • PBKDF2 key derivation with 100,000 iterations • ChaCha20 cryptographically secure stream cipher • Polyalphabetic substitution — defeats frequency analysis • Chaffing and winnowing — random padding hides message boundaries • Statistical indistinguishability — encoded sequences match natural music distribution • Compression immune — JSON format survives audio transcoding and platform processing • Deep packet inspection resistant — no Melora-specific traffic signature ───────────────────────────────────────── GETTING STARTED ───────────────────────────────────────── 1. Install the Melora extension 2. Open Gmail and click Compose 3. Click the 🎵 Encode button in the toolbar 4. Type your secret message 5. Enter a passphrase you've shared with your recipient 6. Click Encode & Insert 7. Send your email normally Your recipient installs Melora, opens the email, clicks 🎵 Decode Melora Message, enters the passphrase, and reads your hidden message. ───────────────────────────────────────── ABOUT MELORA ───────────────────────────────────────── Melora is developed by Melora Inc., a California company founded by Dr. Qi Zhong. The Melography protocol is designed to provide genuine communication privacy for journalists, activists, and privacy-conscious individuals worldwide. Web app: https://melora.qizhonglabs.com Privacy policy: https://melora.qizhonglabs.com/privacy ───────────────────────────────────────── Melora — Because privacy shouldn't look like a secret.