Asynchronous coordination service enabling Gordian Clubs, FROST signing ceremonies, and other multi-party cryptographic protocols to communicate via "dead-drops" without trusted servers or persistent connections. Provides write-once storage semantics where senders publish encrypted payloads at locations derived from ARIDs (Apparently Random Identifiers) — the storage network sees only HKDF-derived storage keys, never the ARIDs themselves. Backends include BitTorrent Mainline DHT (small messages, ~2hr persistence with hourly re-announcement), IPFS (large content up to 10MB via Kubo daemon, IPNS records), Hybrid (automatic size-based routing combining DHT speed with IPFS capacity), and Server (centralized for testing). All payloads encrypted via GSTP; reference encryption hides IPFS ARIDs from DHT observers. Released October 2025
LicençaBSD-2-Clause Plus Patent License — hubert-rust reference implementation
Status de Dev 🟢 Ativo
Detalhe do Status de DevReleased — alpha/early production; CLI tool (hubert-rust) and FROST-specific CLI demonstrated; reference implementation public
ProprietárioBlockchain Commons LLC (not-for-profit benefit corporation founded by Christopher Allen, April 25, 2019; Berkeley, California). Specification author: Wolf McNally, Lead Researcher
PaísUSA (Berkeley, California)
Ano de Início 2025
StackRust (hubert-rust); IPFS via Kubo daemon HTTP RPC; BitTorrent Mainline DHT via embedded BEP-44 client
FinanciamentoBlockchain Commons donations and patron sponsorships
OriginsBlockchain Commons; designed to enable autonomous coordination of cryptographic objects (Gordian Clubs, FROST ceremonies) without trusted infrastructure
Data FormatsGordian Envelopes wrapped in GSTP (Gordian Sealed Transaction Protocol) encryption; CBOR (via dCBOR)
Mobile SupportLibrary-level — Rust libraries (hubert-rust, frost-hubert-rust) cross-compile to mobile; mobile-friendly given small message size on the DHT backend; no first-party mobile app yet
Web SupportLibrary-level — HTTP transport possible against IPFS Kubo and other backends; web bindings TBD
TermsOpen source, BSD-2-Clause Plus Patent License
FundsUnknown — funded under Blockchain Commons general operating budget; specific Hubert allocation not separately published
Based OnGordian Envelope; GSTP; ARIDs (Apparently Random Identifiers); HKDF (RFC 5869); BitTorrent Mainline DHT (BEP-44); IPFS / IPNS; Kubo
P2P ArchitectureLayered service over existing P2P infrastructure (Mainline DHT and IPFS); not a new node network but a coordination semantics layer above them
Content AddressingARID-derived storage keys (HKDF-derived from ARID; ARID never exposed to network); IPFS CIDs for large payloads with encrypted DHT references
Local-FirstYes — Hubert nodes can run locally; supports air-gapped publication and retrieval
E2EEYes — all payloads GSTP-encrypted; reference encryption hides IPFS ARIDs from DHT observers; storage backends see only encrypted blobs
Byzantine Fault ToleranceInherits from underlying DHT/IPFS substrate; write-once semantics eliminate race conditions and ensure message immutability
SignaturePer-payload cryptographic signing via Envelope + GSTP; integrates with FROST threshold signatures
PermissionsARID-based addressing — only parties knowing the ARID (out-of-band) can compute the storage location; permits in payload Envelopes provide further access control
Infrastructure FunctionAsynchronous coordination service — write-once dead-drops for multi-party cryptographic protocol messages; query-addressable storage abstraction over diverse backends
Threat ModelUntrusted storage networks; metadata privacy from DHT observers (ARIDs hidden via HKDF derivation; IPFS ARIDs hidden from DHT via reference encryption); does not provide forward secrecy for long-running conversations (would require ratcheting layered above)
Volunteer / Node ModelInherits from underlying substrates — BitTorrent Mainline DHT (volunteer global network), IPFS (volunteer + paid pinning); Hubert itself is a client/library, not a separate node network
Traffic VisibilityStorage operators see encrypted blobs at HKDF-derived storage keys; ARIDs themselves never exposed; HTTPS for IPFS Kubo RPC
Active Deployment ScaleSmall — recently released; ecosystem in early adoption phase
Viu algo faltando ou que poderia ser melhorado? Nos diga →