Kaspa Identity Layer
SecureChat uses the Kaspa BlockDAG as a decentralized identity layer. Instead of phone numbers or email addresses, your cryptographic public key is anchored on-chain — giving you a permanent, self-sovereign identity that no company can revoke.
Why Kaspa
BlockDAG Advantages
Kaspa's BlockDAG architecture provides the ideal properties for a decentralized identity system: fast finality, low cost, and battle-tested Proof-of-Work security without requiring stake or validators.
- 10 blocks per second — fast enough for real-time identity operations and key rotation
- Proof-of-Work security — same trust model as Bitcoin, no stake requirements or validator sets
- Minimal fees — identity anchor transaction costs fractions of a cent
- No smart contracts needed — simple UTXO transactions with OP_RETURN suffice
- Community operated — no single company controls the network
- GHOSTDAG protocol — parallel blocks mean no orphans, no wasted work
Identity Anchoring
X25519 Public Key in OP_RETURN
When a user creates a SecureChat identity, their X25519 public key is embedded in a Kaspa transaction's OP_RETURN field. This creates a permanent, timestamped, tamper-proof record of the public key bound to a Kaspa address.
- One-time anchor: Public key is written to the chain once during setup
- OP_RETURN payload: X25519 public key (32 bytes) + Ed25519 signature
- Kaspa address = identity: Your Kaspa address becomes your SecureChat ID
- Key rotation: New anchor transaction with previous key's signature as proof
- No message content: Only identity data touches the chain — never message content
Contact Discovery
Find Contacts by Kaspa Address
To add a contact, you only need their Kaspa address. SecureChat queries the BlockDAG for the associated public key anchor transaction, verifies the Ed25519 signature, and establishes an encrypted channel — no server-side directory required.
- Lookup: Query Kaspa BlockDAG for OP_RETURN transactions from the target address
- Verification: Ed25519 signature proves the key was published by the address owner
- No phone numbers: No SIM card, no email, no centralized directory
- QR codes: Share Kaspa address via QR for in-person contact exchange
- Offline-capable: Once keys are cached locally, no network needed for verification
Relay Node Registry
Decentralized Relay Discovery
Relay node operators register their endpoints on-chain using Kaspa transactions. Clients discover available relays by scanning the BlockDAG — no hardcoded server list, no central relay directory.
- Registration: Relay operators publish endpoint + public key via OP_RETURN
- Permissionless: Anyone can register a relay node — no approval needed
- Liveness: Periodic heartbeat transactions prove the relay is still operational
- Client selection: Users choose relays based on latency, reputation, and geographic proximity
- Decentralized: No single entity controls which relays are available
KAS Micropayments for Relay Operators
Sustainable Relay Network
Relay operators earn KAS micropayments for forwarding encrypted message blobs. This creates a sustainable, market-driven network where relay capacity scales with demand — no donations, no corporate sponsorship required.
- Per-message payments: Tiny KAS amounts per forwarded message (fractions of a cent)
- Direct payment: Sender pays relay directly via Kaspa transaction
- No middleman: Payments go directly to the relay operator's Kaspa address
- Market pricing: Relay operators set their own rates — competition keeps prices low
- Privacy preserved: Payment does not reveal message content or recipient identity
Implementation Status
Phase 2 — Q3 2026
The Kaspa identity layer is currently in the design phase. The core cryptographic primitives (X25519, Ed25519) are already implemented in the SecureChat crypto stack via lazysodium-android. The on-chain integration, relay registry, and micropayment system are planned for Phase 2.
- Completed: X25519 + Ed25519 key generation and management
- In design: OP_RETURN transaction format and parsing
- In design: Relay node registry protocol
- In design: KAS micropayment flow and fee structure
- Planned: Kaspa testnet integration and end-to-end testing