> ## Documentation Index > Fetch the complete documentation index at: https://hayate.shiina.xyz/llms.txt > Use this file to discover all available pages before exploring further. # Hayate: Encrypted LAN File Transfers at Wire Speed > Hayate transfers files and directories across your LAN using QUIC, X25519 encryption, and automatic peer discovery — no cloud, no accounts needed. Hayate is a blazing-fast CLI tool and embeddable Rust library for encrypted file and directory transfers across your local network. It combines QUIC transport with automatic peer discovery, hardware-accelerated encryption, and a single 15 MB binary that runs on macOS, Linux, Windows, and Android — all without a cloud account, a rendezvous server, or any manual network configuration. You just run a command, share a four-word code, and your files arrive encrypted at full wire speed. ## What Makes Hayate Different Most LAN transfer tools make you choose between convenience and security. Tools like `scp` and `rsync` require SSH setup and manual IP addresses. Magic Wormhole routes traffic through a rendezvous server. LocalSend uses HTTP/HTTPS without the performance headroom of QUIC. Hayate combines the best of all worlds: automatic peer discovery via mDNS and UDP broadcast, a QUIC transport layer for 0-RTT handshakes and multiplexed streams, and ephemeral X25519 key agreement with hardware-accelerated AEAD frame encryption — all in a single self-contained binary. | Tool | Transport | Discovery | Encryption | Android | | --------------- | ---------- | ----------------- | ----------------- | ---------- | | `scp` / `rsync` | TCP/SSH | Manual IP only | SSH | No | | Magic Wormhole | TCP/TLS | Rendezvous server | PAKE | Via Python | | LocalSend | HTTP/HTTPS | mDNS | TLS | Yes | | **Hayate** | **QUIC** | **mDNS + UDP** | **X25519 + AEAD** | **Yes** | ## Two Transfer Modes Hayate supports two ways to connect a sender and receiver: **Pairing Mode** is the default experience. The sender broadcasts a four-word code phrase over mDNS and UDP; the receiver listens for it and automatically establishes a QUIC session. You never need to look up an IP address. The code phrase is also mixed into the HKDF key derivation, so only peers that know the exact phrase can decrypt the session. **Direct Mode** is for situations where you already know the receiver's IP address, or where your network restricts multicast traffic. The receiver binds a port and prints its address; the sender connects directly. Direct mode trades automatic discovery for simplicity and works reliably across networks with stricter multicast policies. ## Key Highlights * **QUIC transport** — 0-RTT handshakes, multiplexed streams, and no head-of-line blocking * **mDNS + UDP discovery** — peers find each other automatically across macOS, Linux, Windows, and Android * **X25519 + HKDF** ephemeral key agreement with optional passphrase salting * **AES-256-GCM** (hardware-accelerated) or **ChaCha20-Poly1305** per-frame AEAD encryption * **Blake3 / RapidHash / SHA-256** integrity verification with checksum display on completion * **Zstd compression** that automatically skips pre-compressed formats like `.zip`, `.mp4`, and `.jpg` * **Safe tar streaming** for directories, with path-traversal protection on extraction * **Thread-per-core runtime** via `compio` with io\_uring (Linux), IOCP (Windows), and kqueue (macOS) * **Single 15 MB binary** — no runtime, no dependencies, no installation wizard ## Where to Go Next Get the Hayate binary on macOS, Linux, Windows, or Android in under a minute. Send your first encrypted file across your LAN in three commands. Understand the difference between Pairing Mode and Direct Mode. Learn how Hayate uses X25519, HKDF, and AEAD to protect every transfer.