Trustless Multi-Hop Relays.
Decentralized mesh networks eliminate central choke points, but they force every intermediate node to act as an untrusted router. Traditional transport-layer encryption breaks at each hop boundary, forcing nodes to inspect payloads to route them.
Noctis decouples wire routing metadata from application payloads. Intermediate relays can forward packets across bounded TCP connections without accessing ephemeral keys or viewing plaintext data.
The Security Core.
Ed25519 Identity
Each node generates an immutable Ed25519 signing keypair serving as its network identifier. Identity verification happens at session handshake time, preventing spoofing and impersonation.
HKDF-SHA-256
Derives separate symmetric keys for transmission and reception from ephemeral Diffie-Hellman secrets. Every session operates within isolated cryptographic bounds with ratchet-ready properties.
Bounded Relays
Enforces sequence-based sliding windows to drop replayed packets, uses bounded TCP buffer rings, and decrements strict TTL values to kill forwarding loops across untrusted peers.
Verified Protocol Integrity.
The Stack.
Concurrent, memory-safe Go architecture paired with verified cryptographic primitives.