Skip to content
Alle Guide-Kapitel

Identities and keys

How a Reticulum identity becomes a portable cryptographic self you can take offline.

An identity is a keyset

An identity is a keyset

A Reticulum identity holds Curve25519 material used for encryption (X25519) and signing (Ed25519). Applications build destinations from identities. Peers learn public material from announces.

  • Identity keys are the long-term foundation for destinations and links
  • Private material must stay on the device that owns the identity
  • Public material is what announces share so others can encrypt to you

Identity keys

X25519 + Ed25519

ECDH / HKDF

Ephemeral key agreement, key expansion

AES-256-CBC + HMAC-SHA256

Encrypt and authenticate ciphertext

Wire token

On-wire identity ciphertext

Create and persist an identity

import RNS

identity = RNS.Identity()
# Persist so restarts keep the same cryptographic self.
identity.to_file("identity")
loaded = RNS.Identity.from_file("identity")
print(RNS.prettyhexrep(loaded.hash))

Selbst ausprobieren: Step Create through Outbound. Persist before you announce. Recall before you open a link to a peer.

Create

Generate a new identity keyset (X25519 encryption, Ed25519 signing).

Schritt 1 von 3

R
Reticulum-Go

A Go implementation of the Reticulum Network Stack. Building the future of resilient, sovereign communications.

Implementation License: Apache-2.0

Follow Development

Links

Quad4 Software

Backed by Quad4 Software. Building privacy-first, secure, efficient software.

quad4.io
© 2026 Quad4 Software. All rights reserved.
Deployed using Coolify