RANNTA X-Chain

Post-Quantum Security Architecture - ML-DSA-65 · ML-KEM-768 · HybridRequired

RANNTA operates post-quantum security in both authorization and validator-sensitive transport paths. Protected authorization combines classical secp256k1/ECDSA with ML-DSA-65, using the algorithm specified by NIST FIPS 204. Validator-sensitive transport is active on Mainnet with X25519 + ML-KEM-768 + HKDF-SHA256 + AES-256-GCM under HybridRequired fail-closed policy.

RANNTA consensus engineering includes HybridRequired authorization surfaces for validator-sensitive proposal, vote and finality paths. When HybridRequired protection is active, classical-only authorization is rejected instead of being silently accepted. Validator-sensitive protected transport likewise rejects plaintext-sensitive traffic, classical-only peer authentication, replayed records, tampered records, wrong-session records and wrong-direction records.

• ML-DSA-65 post-quantum verification using the algorithm specified by NIST FIPS 204.
• HybridRequired authorization combining classical and post-quantum authorization.
• X25519 + ML-KEM-768 hybrid key establishment for validator-sensitive Mainnet transport.
• HKDF-SHA256 + AES-256-GCM for protected transport key derivation and authenticated records.
• Fail-closed enforcement on protected authorization and validator-sensitive transport paths.
• Canonical payload binding, key versioning and replay resistance as part of the authorization model.
• RANNTA PQ Cloud for exchanges, treasuries, validators, blockchains and digital-asset infrastructure.
• Next protocol frontier: canonical PQ state, broader distributed validator quorum, broader protected transport coverage and PQ authorization aggregation.

RANNTA X-Chain Mainnet enforces hybrid post-quantum protection across validator-sensitive authorization and transport paths.

Transport protocol boundary: the current validator-sensitive transport is a RANNTA-specific session and record protocol using X25519, ML-KEM-768, HKDF-SHA256 and AES-256-GCM. RANNTA does not claim TLS 1.3 or RFC 10024 X25519MLKEM768 conformance for this transport unless a future release explicitly documents and verifies that conformance.

Standards and assurance boundary: references to NIST FIPS 204 identify the ML-DSA algorithm specification. RANNTA does not currently claim NIST ACVP/CAVP validation, CMVP validation, FIPS module certification or an independent third-party audit unless a specific external record is linked.

Scope: this transport claim applies to validator-sensitive protected paths. It does not claim that every public RPC byte, every public full-node connection or every hosted PQ Cloud customer connection is ML-KEM protected.

Public Node Participation - RANNTA Core Portable RC1

Public node participation is open. RANNTA Core Portable RC1 provides portable Windows x64 and Windows ARM64 builds for running an independent RANNTA X-Chain Mainnet full node, synchronizing local chain state and monitoring node health.

Current Core transport: the portability-audited public Core runtime has verified HybridRequired sessions using X25519 + ML-KEM-768 + HKDF-SHA256 + AES-256-GCM with encrypted chain-sync records. This does not imply that every public RPC connection or every network path uses ML-KEM.

• Independent public-node identity and authenticated peer sessions.
• Full Mainnet synchronization and live local/network height monitoring.
• HybridRequired public-node transport and encrypted chain-sync records.
• Secure reward-wallet binding for MetaMask and compatible EIP-1193 EVM wallets.
• No wallet private key or seed phrase is requested or stored.
• Qualified uptime, synchronization health, challenge performance and wallet verification are measured from participation.
• Current qualification target: at least 6 qualified hours per day for at least 20 qualified days in a month.
• Eligible early-node participation recorded during the measurement period is intended to be included in the RNTX reward settlement process when manual distribution is activated.

RANNTA Core Download & Installation