
Calypso implements on-chain secrets management using a distributed key generation protocol (DKG) combined with threshold decryption, so that decryption keys are never held by a single node. Access policies are expressed as Distributed Access Right Controls (DARC) stored on the OmniLedger blockchain, providing a fully auditable and decentralized enforcement mechanism.

Calypso allows a writer to encrypt a document, and to store the list of allowed readers on a blockchain. Over time, the writer can update this list to include more readers, or to remove readers that they don't trust anymore. The blockchain will verify all read requests and log them immutably. Only authorized read-requests will receive the decryption key.
This has a big advantage over current document encryption schemes, which suffer from:
This page was last edited on 2024-03-20.
This page was last edited on 2024-03-20.