Skip to main content

How does EMOZ encrypt and protect sensitive metadata on the blockchain?

Coral avatar
Written by Coral
Updated over 4 months ago

EMOZ uses strong encryption methods to protect all sensitive user data that is stored on the blockchain. The encryption ensures that even though the data is recorded publicly, it cannot be read or accessed without the user’s unique decryption key (the seed).

Specifically, EMOZ uses the algorithm XSalsa20-Poly1305, a modern and secure encryption method designed for speed, simplicity, and long-term resilience. It offers both confidentiality and integrity, meaning the data is not only unreadable without the key, but also protected against tampering.

All ownership metadata (such as the user’s full name, ownership declaration, and issuing service) is encrypted using XSalsa20-Poly1305. In addition, the email address is hashed using SHA-256 before being included in the encrypted metadata. This means the email is effectively double protected:

  • First by hashing it (irreversible transformation),

  • Then by encrypting it along with the other metadata.

As a result, the email is never exposed in clear text, not even within the encrypted content. This layered approach ensures that even if someone were to decrypt the metadata (with your permission), they would still not see your email directly—only its SHA-256 hash, which is only meaningful if someone already knows your email and tries to match it.

Did this answer your question?