EMOZ uses a double layer of cryptographic protection for all personal data stored on the blockchain:
Email hashing (SHA-256):
Before anything is encrypted, your email address is first hashed using the SHA-256 algorithm. This ensures your actual email is never directly included, even in encrypted form.
Metadata encryption (xSalsa20-Poly1305):
All user-related metadata (including your full name, the hashed email, your ownership declaration, and any internal fields) is then encrypted using xSalsa20-Poly1305, a modern and highly secure symmetric encryption algorithm.
The encryption key (seed) used for this is:
Randomly generated per certificate,
Never stored on-chain,
And provided only to you, inside your PDF certificate.
As a result, all personal data stored on-chain is fully encrypted and cannot be read by anyone unless they have the matching decryption key (the seed). This ensures your privacy is preserved without sacrificing public verifiability.