After installation, the user either generates a pair of GPG keys with RetroShare, or selects an existing keypair to use. After authentication and exchanging an asymmetric key, ssh is used to establish a connection. End to end encryption is done using OpenSSL. Friends of friends cannot connect by default, but they can see each other if the users allow it.