Skip to main content
Hayate is a blazing-fast CLI tool and embeddable Rust library for encrypted file and directory transfers across your local network. It combines QUIC transport with automatic peer discovery, hardware-accelerated encryption, and a single 15 MB binary that runs on macOS, Linux, Windows, and Android — all without a cloud account, a rendezvous server, or any manual network configuration. You just run a command, share a four-word code, and your files arrive encrypted at full wire speed.

​
What Makes Hayate Different

Most LAN transfer tools make you choose between convenience and security. Tools like scp and rsync require SSH setup and manual IP addresses. Magic Wormhole routes traffic through a rendezvous server. LocalSend uses HTTP/HTTPS without the performance headroom of QUIC. Hayate combines the best of all worlds: automatic peer discovery via mDNS and UDP broadcast, a QUIC transport layer for 0-RTT handshakes and multiplexed streams, and ephemeral X25519 key agreement with hardware-accelerated AEAD frame encryption — all in a single self-contained binary.

​
Two Transfer Modes

Hayate supports two ways to connect a sender and receiver: Pairing Mode is the default experience. The sender broadcasts a four-word code phrase over mDNS and UDP; the receiver listens for it and automatically establishes a QUIC session. You never need to look up an IP address. The code phrase is also mixed into the HKDF key derivation, so only peers that know the exact phrase can decrypt the session. Direct Mode is for situations where you already know the receiver’s IP address, or where your network restricts multicast traffic. The receiver binds a port and prints its address; the sender connects directly. Direct mode trades automatic discovery for simplicity and works reliably across networks with stricter multicast policies.

​
Key Highlights

  • QUIC transport — 0-RTT handshakes, multiplexed streams, and no head-of-line blocking
  • mDNS + UDP discovery — peers find each other automatically across macOS, Linux, Windows, and Android
  • X25519 + HKDF ephemeral key agreement with optional passphrase salting
  • AES-256-GCM (hardware-accelerated) or ChaCha20-Poly1305 per-frame AEAD encryption
  • Blake3 / RapidHash / SHA-256 integrity verification with checksum display on completion
  • Zstd compression that automatically skips pre-compressed formats like .zip, .mp4, and .jpg
  • Safe tar streaming for directories, with path-traversal protection on extraction
  • Thread-per-core runtime via compio with io_uring (Linux), IOCP (Windows), and kqueue (macOS)
  • Single 15 MB binary — no runtime, no dependencies, no installation wizard

​
Where to Go Next

Install

Get the Hayate binary on macOS, Linux, Windows, or Android in under a minute.

Quick Start

Send your first encrypted file across your LAN in three commands.

Transfer Modes

Understand the difference between Pairing Mode and Direct Mode.

Security Model

Learn how Hayate uses X25519, HKDF, and AEAD to protect every transfer.