[andor]

Oh wow. It uses a very innovative REST key exchange protocol.

Encryption:

  * Messages are encrypted with AES 128 CBC
  * Random key for each message
  * The AES key is sent to the server, and exchanged for some key-id
  * They key id is prepended to the message

Decryption:

  * Split message into key id and encrypted part
  * Download key from server
  * Decrypt message

Edit: Decompile it to see for yourself

[andor]

It's based on "scrambls", and they have a description of their protocol here:

https://developer.scrambls.com/bin/view/Main/P4ComponentInte...