Encrypted Mempool

You ──encrypt──► mempool (stores encrypted blob) ──decrypt──► miner ──► execute

1. Generate a random ephemeral keypair (r, R = r×G)
2. ECDH:  shared_point = r × protocol_pubkey
3. HKDF-SHA256: symmetric_key = HKDF(
       ikm  = shared_point.x,
       salt = R,
       info = "nexus-encrypted-mempool-chacha20poly1305-v2",
       len  = 32 bytes
   )
4. Encrypt with ChaCha20-Poly1305 (RFC 8439):
       ciphertext = Encrypt(symmetric_key, nonce, raw_transaction)
5. Transaction ID = SHA256(version || R || ciphertext)
6. Submit: { ciphertext, R, nonce, version, tx_id }

1. ECDH:  shared_point = protocol_privkey × R
2. Derive same symmetric_key via HKDF
3. Decrypt ciphertext → raw transaction
4. Execute

import { encryptTransaction, serializeEncryptedTransaction } from '@yattacorp/nexus-sdk';

// Fetch the protocol's public key
const { pubkey: protocolPubkeyHex } = await client.getProtocolPubkey();

// Serialize your transaction (bincode format)
const rawTx = serializeTransaction(myTransaction);

// Encrypt it
const encrypted = encryptTransaction(rawTx, protocolPubkeyHex);

// Serialize the encrypted envelope (bincode)
const payload = serializeEncryptedTransaction(encrypted);

// Submit — mempool only sees the encrypted blob
await client.submitEncryptedTransaction(payload);

// Track by encrypted transaction ID
console.log('Tx ID:', encryptedTxIdHex(encrypted));