Every blockchain is a permanent public copy. Anyone can store every transaction today and wait for a quantum computer that runs Shor's algorithm. On that day, the elliptic-curve keys that hide receivers and amounts in today's privacy coins stop hiding anything that was ever recorded.
A hard fork can patch a bug. It cannot unpublish a ledger. That's why payments to a Kyber kybq1 address are sealed with lattices today, and Faraday moves spends to hash-based proofs next.
Each input signs alongside 15 decoys drawn from the chain. An MLSAG signature proves one of them is yours, never which.
Quantum addresses carry a lattice public key. Senders encapsulate a fresh secret per payment; only the receiver can decapsulate it.
Every output lands at a key derived for that payment alone. Two payments to one wallet look unrelated.
Amounts are commitments. 48-bit range proofs stop negative values, and inputs balance outputs as curve points.
One output always yields the same key image, so a second spend is refused, yet nothing links the image to the output.
Memory-hard proof of work. Ordinary CPUs stay competitive and nobody signs a block, so there's no block key to forge.
Spend proofs move off elliptic curves and every spend hides in the whole chain instead of 16 outputs.
A Kyber transaction proves that value moved without saying who sent it, who received it, or how much. This is what a wallet does to make one, and what the chain keeps. The panel shows the latest private transaction on the live testnet.
A kybq1 address carries the spend key, the view key and an ML-KEM-768 public key. At about 1,700 characters it's long, so wallets copy it whole.
It encapsulates a shared secret to the receiver's ML-KEM key. From that secret it derives a one-time address and a blinding key no one else can compute.
The value is hidden in a Pedersen commitment, encrypted to the receiver, and backed by a 48-bit range proof so nobody can mint coins from a negative amount.
It picks 15 decoys from the chain, builds an MLSAG signature over all 16 and publishes a key image. All of this happens in your browser.
Nodes check the ring, the range proofs, the balance and the key image, and Argon2id miners seal it in a block. The receiver's wallet tries its keys on each new output. One opens.
Three private designs and one question that matters once the ledger has been copied: does what was recorded stay private?
Post-quantum parts are bigger than the elliptic-curve parts they replace. These are Kyber's real numbers, measured on the running testnet.
Ring signature, two outputs, two 48-bit range proofs and one ML-KEM ciphertext.
The ML-KEM-768 ciphertext that rides with every payment to a kybq1 address.
Characters in a kybq1 address. The ML-KEM-768 key alone is 1,184 bytes.
No ceremony and no secret anyone had to destroy. Every proof checks against public math.
Private testnet. Ring signatures, stealth outputs, range proofs, ML-KEM quantum addresses, explorer, browser wallet, faucet.
$KYBER. The token launches on Solana and carries the project to mainnet.
Open mining. A standalone Argon2id miner so anyone can mine testnet blocks from a CPU.
Faraday. Hash-based spend proofs and full-chain anonymity, specified, tested and reviewed in the open.
Mainnet. Genesis of the main chain with Faraday on from block 1.
Yes. Every transaction on the live testnet uses a real ring of 16, real one-time addresses, real Pedersen commitments with range proofs and, for kybq1 addresses, real ML-KEM-768. Open the explorer: there are no senders, receivers or amounts to read.
They are fast and well studied today. A quantum computer that could break them does not exist yet, but recorded receivers and amounts are the part that leaks backwards in time, so Kyber seals those with ML-KEM first. Faraday replaces the ring with hash-based proofs.
In your browser. The wallet creates a 32-byte seed on your device and derives the spend key, view key and ML-KEM key from it. The node never sees them. Back up the seed.
tKYBER is the testnet coin from the faucet and has no value. $KYBER is the Solana token that funds the work and carries the project to mainnet.
Yes. The node, explorer and wallet are one open-source Node.js program. Clone the repository, run npm install and npm start, and you have the full chain on your machine.
After Faraday is specified, tested and reviewed in the open. Follow @KyberChainL1 for dates.
Protocol, API and FAQ in the docs. The code is public.