Marmot Protocol

Protocolo P2P

A messaging protocol specification combining the MLS Protocol (RFC 9420 — Messaging Layer Security) with Nostr's decentralized identity and relay network to enable efficient, private E2EE group messaging without centralized servers or legacy identity systems. Marmot extends NIP-EE (the Nostr MLS integration spec) with a broader set of specifications including media handling (MIP-04), group metadata standardization, and key package distribution. Provides forward secrecy and post-compromise security at the group messaging level, protecting both message content and metadata (communication patterns and group membership hidden). Multiple independent implementations exist: MDK (Rust library — mdk-core v0.7.1), marmot-ts (TypeScript/npm), mdk-swift (Swift), mdk-python (Python). White Noise is the primary reference application.

Comunidade
Links
Visitar Website Sugerir uma correção

Detalhes

Licença Open source (MIT/Apache likely); https://github.com/marmot-protocol/marmot; MDK at https://github.com/parres-hq/mdk
Status de Dev 🔬 Beta
Detalhe do Status de Dev Pre-specification / WIP (spec under active development; breaking changes possible; no formal security audit yet; MDK v0.7.1 released; marmot-ts available on npm; White Noise ships on it in production)
Proprietário Parres / marmot-protocol GitHub org (parres-hq); community-developed specification
Órgão de Governança None (community-developed specification under the parres-hq organization; no formal governing body)
País USA (AOS affiliation)
Ano de Início 2024
Stack Rust (mdk-core — primary implementation, OpenMLS-based); TypeScript (marmot-ts — npm package); Swift (mdk-swift); Python (mdk-python); Flutter (White Noise reference app)
Financiamento Community / AOS / OpenSats / HRF (via White Noise funding; protocol spec itself community-funded)
Última Investigação 1 de jul. de 2026

Domínios de Caso de Uso

Evolução de Plataformas e Soberania

Capacidades

Criptografado de ponta a ponta

Protocolo P2P Atributos

Origens Privacy / Secure group messaging (motivated by limitations of Signal centralized infrastructure, NIP-04/17 lack of forward secrecy and group messaging; combines MLS cryptographic rigor with Nostr decentralization; designed to provide Signal-level security with censorship-resistant infrastructure)
Banco de Dados Not yet documented
Linguagem de Consulta N/A
Formatos de Dados MLS ciphertext (RFC 9420 encrypted group messages); Nostr events (NIP-compliant transport wrapper for MLS messages and key packages); MLS key packages (Ed25519 identity material published to Nostr relays); encrypted media (MIP-04); BLAKE3 or SHA256 content hashes
Edição Colaborativa em Tempo Real N/A
Edição de Texto Rico Not yet documented
Suporte Móvel Yes (MDK used in White Noise Flutter app — Android, iOS)
Suporte Web Partial (marmot-ts enables browser/web implementation; marmots-web-chat demo)
Aplicativos Nativos Yes (via White Noise reference app — Android, iOS, Linux, macOS, Windows)
Termos Free / Open source
Fundos Undisclosed
Baseado Em MLS / RFC 9420 (cryptographic group messaging standard — OpenMLS Rust implementation); Nostr (Fed Pro — transport and identity layer); NIP-EE (Nostr MLS integration base specification extended by Marmot)
Arquitetura P2P Hybrid relay + local (Nostr relays transport MLS ciphertext and distribute key packages; MLS group state stored locally on each participant's device; no central server for message storage; relay network provides decentralized transport without compromising E2EE)
Rede de Sobreposição Application-wide (scoped to Marmot group instances; groups can span any Nostr relays; no global network topology required beyond Nostr relay access)
Endereçamento por Conteúdo No (messaging protocol; no content addressing)
Local-First Yes (MLS group state managed locally; offline messages queued and delivered when relay connection restored)
Criptografia de Ponta a Ponta (E2EE) Yes (MLS RFC 9420 — forward secrecy, post-compromise security, group message E2EE; metadata protection hides communication patterns and group membership)
Biblioteca de CRDTs N/A (sequential MLS ratchet provides forward secrecy; not a CRDT-based system)
Tolerância a Falhas Bizantinas N/A (messaging protocol; BFT not applicable)
Assinatura Ed25519 (Nostr keypair for identity; MLS signing keys distinct from Nostr identity keys for security separation; DEFAULT_CIPHERSUITE: MLS_128_DHKEMX25519_AES128GCM_SHA256_Ed25519)
Permissões Group-member-controlled (MLS group admin manages membership; Nostr keypair required for participation; no phone number or email required)
Compatibilidade com a Web Semântica No
Contrato Inteligente No
Posição na Pilha de Protocolo Application layer (sits above Nostr relay transport; defines group messaging semantics, key management, and media handling on top of MLS + Nostr)
Incorporação de Ativo / Valor N/A (messaging protocol; no asset embedding)
Maturidade / Padronização do Protocolo Pre-specification / WIP (active spec development; breaking changes possible; no formal security audit; multiple implementations in Rust/TypeScript/Swift/Python; White Noise ships in production; NIP-EE base in Nostr protocol repo)