On this page 3 sections
DinoLink uses AES-256-GCM for the encrypted transport between your device and our servers. It’s the same cipher family used by banks, government communications, and most modern HTTPS sites — chosen for its combination of confidentiality and authenticated integrity.
What it gives you
AES-256-GCM is what cryptographers call an AEAD cipher (Authenticated Encryption with Associated Data). It does two jobs in one operation:
- Confidentiality. The data is encrypted with a 256-bit key. Anyone intercepting the traffic sees what looks like random noise.
- Integrity. A built-in authentication tag means we detect (and reject) any traffic that’s been modified in transit. Without this, an attacker could potentially flip bits in your traffic without you knowing.
Both halves matter. Encryption alone, without integrity, has historically been the source of practical attacks against TLS — Padding Oracle, BEAST, Lucky 13. AEAD ciphers are the modern fix.
What it doesn’t solve
Encryption protects the connection. It doesn’t:
- Verify that the site you’re talking to is the real one (that’s TLS certificates’ job, end-to-end).
- Stop you from typing your password into a phishing form (the tunnel will faithfully deliver it).
- Prevent malware already on your device from doing whatever it wants.
See also
- What a VPN is and why you need one in Russia in 2026 — the threat-model context for what encryption protects and what it doesn’t.