ML-KEM-768 · FIPS 203
connecting to node
A ledger is a copy that never goes away. Every node keeps one, and so can anyone else.
Archive the transfers today, wait for a quantum computer that runs Shor's algorithm, and the elliptic-curve keys that hid receivers and amounts in older private coins stop hiding anything that was ever written down.
SELEN seals receivers and amounts with lattices from the very first block, so every archived copy stays a copy of nothing.
The wallet runs ML-KEM-768 against the receiver's key and turns the shared secret into a one-time address.
The amount becomes a commitment with a 48-bit range proof, and the wallet signs inside a ring of sixteen.
Miners fold it into a block. The receiver tries every new capsule, and exactly one of them opens.
Nobody signs a block, so there is no validator key to steal. Proof of work orders the chain, and every node re-checks every ring, range proof and key image on its own.
········Mine in the browser at /mine or with the command-line miner. Argon2id fills two mebibytes per try, so an ordinary CPU stays in the race, and every reward lands at your own private address.
network hashrate —········Node, explorer, wallet and miner are one open-source Node.js program. Clone it, run npm start, and you hold and verify the whole chain yourself.
blocks verified —Read from this node's API and refreshed the moment each block lands. Nothing here is typed in by hand.
Three private designs, judged on the one question that matters once a chain has been archived: does what was recorded stay private after Q-day?
* A quantum adversary who knows an address can derive its viewing key from the public key, then sweep an archived chain for every payment made to it.
Three phases are running today. The next two move spend proofs off elliptic curves and start a fresh main chain.
Ring signatures, one-time outputs, range proofs, ML-KEM quantum addresses, explorer, browser wallet and faucet.
The token launches on Robinhood Chain and funds the road to mainnet.
Anyone mines from the browser or the CLI miner, with rewards paid to their own private address.
Hash-based spend proofs and full-chain anonymity, specified, tested and reviewed in public.
A fresh genesis with Perigee active from the very first block.
Yes. Every transfer on the running testnet uses a real ring of sixteen, real one-time keys and real commitments with range proofs, and payments to selenq1 addresses carry real ML-KEM-768 capsules. The explorer has no sender, receiver or amount to show you. Each transaction page has a button that re-runs the ring signatures, range proofs and balance check inside your own browser.
The part that would leak backwards in time: who received what. Older private chains find receivers with elliptic-curve Diffie–Hellman, which Shor's algorithm breaks. SELEN quantum addresses carry an ML-KEM-768 public key, the lattice KEM NIST standardised as FIPS 203. A fresh secret is encapsulated for each payment and the 1,088-byte capsule travels with the output. Only the receiver can open it, quantum computer or not.
They are fast, thoroughly studied, and no machine that breaks them exists today. If one appears, the most it can learn from a recorded ring is which of the sixteen members was really spent, not who received the money or how much. Receivers and amounts are what leak forever, so those are sealed first. Perigee replaces the ring with hash-based spend proofs.
Only in your browser. The wallet creates a 32-byte seed on your device, shows it as 24 words, encrypts it with your password and derives the spend key, view key and ML-KEM key from it. The node never sees any of them. Write the 24 words down: they are the only way back in.
Open /mine, paste a SELEN address or use your wallet's, and press start. Your browser computes Argon2id proof of work in background threads, and every block you find pays its reward to that address as a private output. For more hashrate, run the command-line miner against this node or your own.
tSELEN is the testnet coin from the faucet and from mining. It has no value and will not carry over. $SELEN is the Robinhood Chain token that funds development and carries the project to mainnet.
Yes. Node, explorer and wallet are a single open-source Node.js program. Run npm install and npm start, and set PEER= to a public node to download and re-verify the entire chain yourself.
After Perigee is written up, tested and reviewed in public. Mainnet starts from a new genesis with Perigee switched on at block one.
Create a wallet in your browser, take tSELEN from the faucet and watch a payment cross the chain without leaving a name, a destination or a number behind.