What kind of encryption does EMOZ use for my personal data on-chain?
EMOZ uses a double layer of cryptographic protection for all personal data stored on the blockchain:
- Email hashing (SHA-256): Before anything is encrypted, your email address is first hashed using the SHA-256 algorithm. This ensures your actual email is never directly included, even in encrypted form.
- Metadata encryption (xSalsa20-Poly1305): All user-related metadata (including your full name, the hashed email, your ownership declaration, and any internal fields) is then encrypted using xSalsa20-Poly1305, a modern and highly secure symmetric encryption algorithm.
The encryption key (seed) used for this is:
- Randomly generated per certificate,
- Never stored on-chain,
- And provided only to you, inside your PDF certificate.
As a result, all personal data stored on-chain is fully encrypted and cannot be read by anyone unless they have the matching decryption key (the seed). This ensures your privacy is preserved without sacrificing public verifiability.
Still need help? Write to us at support at emoz dot io and we will get back to you as soon as we can.