Encryption and Privacy Guarantees

​

Privacy Guarantees

• Default Ring
• Custom Rings

The Default Ring is the permissionless confidential Ring. Sender and recipient addresses are public onchain. Asset and amount are encrypted. Only the sender and the recipient can decrypt the transaction, each with their own viewing key. Each can decrypt only their own balance.

Party	Sees	Does not see
Alice	Her payment to Bob. That Bob paid Charlie.	The asset and amount of Bob’s payment to Charlie
Bob	Alice’s payment to him. His payment to Charlie.	Alice’s balance
Charlie	Bob’s payment to him. That Alice paid Bob.	The asset and amount of Alice’s payment to Bob
RPC and Solana	Sender and recipient addresses, commitments, and ciphertexts	Any asset or amount

A Custom Ring

• can be configured to be confidential, or anonymous
• can customize compliance controls, and
• can declare an auditor that can decrypt balances of that Ring.

• Confidential Custom Ring
• Anonymous Custom Ring

Sender and recipient addresses are public onchain. Asset and amount are encrypted.

Party	Sees	Does not see
Alice	Her payment to Bob. That Bob paid Charlie.	The asset and amount of Bob’s payment to Charlie
Bob	Alice’s payment to him. His payment to Charlie.	Alice’s balance
Charlie	Bob’s payment to him. That Alice paid Bob.	The asset and amount of Alice’s payment to Bob
Ring auditor	The Ring activity the policy defines	Activity outside the Ring
RPC and Solana	Sender and recipient addresses, commitments, and ciphertexts	Any asset or amount

A relayer submits the transaction. Sender and recipient are not visible onchain. Only the recipient can see which private wallet sent the payment.

Party	Sees	Does not see
Alice	Her payment to Bob	Bob’s payment to Charlie, or that Charlie exists
Bob	Alice’s payment to him, including which private wallet sent it. His payment to Charlie.	Alice’s balance
Charlie	Bob’s payment to him, including which private wallet sent it	Alice, or her payment to Bob
Ring auditor	The Ring activity the policy defines	Activity outside the Ring
RPC and Solana	The relayer, commitments, and ciphertexts	Sender, recipient, asset, or amount

​

Encryption

• Signing key: The wallet’s Ed25519 Solana keypair to sign transactions. In Anonymous Custom Rings, the private wallet’s P-256 key signs instead.
• Viewing key: A P-256 keypair, used to encrypt and decrypt transactions.
• Nullifier key: A key used to derive nullifiers, which prevent a private balance from being spent twice.

ShieldedAddress = (signing_pk, nullifier_pk, viewing_pk)

​

Integrating a Shielded Keypair

​

Decryption Modes

​

Local Decryption

​

Delegated Decryption

​

Selective Disclosure

• To disclose a single transaction, the sender shares the transaction viewing key, which decrypts only that transaction.
• Custom Rings can also set a separate auditor key. It decrypts the Ring activity the policy defines. Learn more in Custom Enterprise Rings.

​

Learn More

​

Didn’t find what you were looking for?