artagliaPost-Quantum

Mission · Post-quantum privacy

THE POST-QUANTUM ERA.

WE’RE BUILDING QUANTUM-PROOF PRIVACY FOR TOKENIZED STOCKS.

Notary V3 hides who sent what to whom. The next era makes sure it stays hidden, even when quantum computers arrive.

See the layersShield now

0 live · 3 building · 2 in research

Harvest now. Decrypt later.

Every encrypted note on a public chain is stored forever. No one needs a quantum computer today to threaten your privacy today. They only need to save the data and wait.

For most systems that’s a future problem. For privacy it’s a present one: once a past transfer is exposed, it can never be hidden again.

Stock positions are held for years. Their privacy should last at least as long.

Six walls. Built in order.

Vault cross-section: six concentric walls around your notes. Wall I, Hash-sealed notes: Building. Wall II, Independent shielded seed: Building. Wall III, Post-quantum encrypted notes: Building. Wall IV, Quantum recovery path: Research. Wall V, Post-quantum proofs: Research. Wall VI, Post-quantum wallet signatures: Not in our control.VIVIVIIIIIIYour notes
  • Live
  • Building
  • Research
  • Not in our control
I · Hash-sealed notesBuilding

Notes, nullifiers and keys are built from Poseidon hashes, among the most quantum-resistant parts of a ZK system.

II · Independent shielded seedBuilding

Your shielded keys get their own secret, separate from your wallet. If a wallet key ever falls to a quantum computer, your notes don't fall with it.

III · Post-quantum encrypted notesBuilding

Every note sealed with X-Wing: X25519 plus ML-KEM, the NIST post-quantum standard. An attacker would have to break both. What's harvested today stays sealed.

IV · Quantum recovery pathResearch

If classical cryptography ever breaks, holders prove ownership with hash-only secrets and move to safety.

V · Post-quantum proofsResearch

Hash-based proof systems, so the vault stays sound in the quantum era.

VI · Post-quantum wallet signaturesNot in our control

Your wallet's signatures belong to Robinhood Chain and Ethereum. We'll support post-quantum signing as soon as the chain does.

Two locks on every envelope.

  1. The sender locks your note with two keys at once: today’s (X25519) and tomorrow’s (ML-KEM).
  2. Only your shielded account holds both keys to open it.
  3. A quantum computer that breaks one lock still faces the other.

ML-KEM is standardized by NIST as FIPS 203. X-Wing is an IETF draft combining X25519 and ML-KEM-768.

What’s not quantum-safe yet.

  • Notes sent before PQ encryption ships use classical encryption. Re-seal them once it's live.
  • Today's shielded keys are derived from your wallet signature. The independent seed fixes this.
  • Proofs (UltraHonk) rely on elliptic-curve cryptography. Hash-based proofs are in research.
  • Wallet signatures (ECDSA) depend on Robinhood Chain and Ethereum.

We’ll say “quantum-proof” when every wall is up. Until then, we show you exactly which ones are.

DARK TODAY. DARK FOR DECADES.

Speak little. Prove everything.

Shield nowPrivacy StackBreak the Seal