Security and identity
Digitally signed at the source
Every record carries its publisher’s digital signature and is checked before a node stores it. Connections are encrypted, identities are verifiable, and trust in a key can be backed with value.
Security built in
End-to-end encryption with verifiable digital identity.
Digitally signed records
Every message carries its publisher’s Ed25519 digital signature and is verified against the publisher’s profile before it is stored. Provenance is checked, not assumed.
Transport encryption
All connections are secured with the Noise Protocol Framework, providing forward secrecy and mutual authentication.
Encryption at rest
AES-256-CTR field-level encryption with Argon2 key derivation for password-based security.
Digital identity
Cryptographic identities with vCard-style Entity Profile Manifests (EPM) for verified organizational data.
Space Data Standards
CCSDS-compliant schemas for standardized space data exchange; the same FlatBuffer bytes travel the network, sit on disk and come back out of the API.
Public-key security
Purpose-separated public identities and encrypted transport. Credential and signing operations run only in the isolated wallet application.
The security stack
Four layers, each with its own job.
Adversarial security
Rational actors drain compromised keys. Undrained value proves key integrity.
A public key used for signing can derive addresses on cryptocurrency networks. Deposit value at those addresses and you create a game-theoretic security bond: anyone who compromises the private key will drain the funds, because the payout is immediate, anonymous and risk-free. The balance becomes a live indicator of key integrity.
Key derivation
A signing key derives addresses on multiple blockchain networks (BIP-32/44). One key pair serves both authentication and value custody, with no extra infrastructure.
Value as a trust signal
Anyone can deposit to a derived address to signal trust in a key: the owner self-bonds, or third parties bond for them. The balance quantifies the cost of compromise.
Rational-actor assumption
A compromised key allows both impersonation and withdrawal. Draining is the dominant strategy, so undrained value implies no compromise.
Real-time verification
Blockchain state is public and updates every block: a continuous, permissionless proof of key integrity instead of a point-in-time certificate or revocation list.
Account-derived addresses and approval identities are shown by the isolated SDN Account interface after an explicit sign-in.