Field notes / 01
The quiet work
behind private things.
Engineering notes from Enchant: how the Veil hides a sender, how the Envelope keeps moving, and why a server should know less than it does.
A living record of the cryptography.
Written for curious people, not just cryptographers. Equations included. Internal plumbing left out.
Latest notes
6 totalX3DH and the Triple Envelope: the full mathematics of an Enchant session
The complete walk-through of how two devices turn public prekeys into a private, forward-secret session — every Diffie-Hellman, KDF, and ratchet step, with the equations.
x3dh / triple-envelope / encryption / crypto
Post-quantum security: ML-KEM, PQXDH, and the hybrid Triple Ratchet
What a quantum computer actually threatens, and how Enchant layers ML-KEM into both the handshake and the ratchet so that breaking one primitive is never enough.
post-quantum / ml-kem / kyber / hybrid
The mathematics of the Veil: anonymous sender delivery
How Enchant wraps a message so the network can route it without ever learning who sent it — the derivation functions, per-recipient key wrapping, and authentication tags.
veil / anonymous-delivery / metadata / anonymity
Zero-access servers: what Enchant's backend can and cannot see
A tour of the server architecture that claims to be cryptographically blind — and an honest map of the exact boundaries where that statement holds and where it is still being tightened.
server / zero-access / metadata / threat-model
Safety numbers and fingerprints: verifying the person on the other end
X3DH keeps the bytes secret, but it cannot tell you who you are actually talking to. Here is the mathematics of the fingerprint that does.
safety-number / fingerprint / verification / identity
OPRFs, secure value recovery, and zero-knowledge credentials
The mathematics Enchant uses to do the impossible jobs: recover your secrets from a server that must never learn them, and prove who you are without revealing who you are.
oprf / svr / zero-knowledge / ristretto255