Payments
Private payments
Move tokenised money between accounts without publishing who paid whom or how much, with a verifiable proof that nothing was created or spent twice.
Enygma Retail
Quantum-private payments for people and apps
Rayls Enygma Retail is deployed on the Rayls Public Chain, bringing private payments, swaps and auctions to people, wallets and apps. Hide amounts and counterparties, choose how much to reveal, and stay private even from future quantum computers.
ML-KEM
post-quantum encryption, standardised by the US National Institute of Standards and Technology (NIST), protects every user’s view key
4 levels
of recipient privacy, from naming the recipient to revealing nothing at all
$RLS
pays the gas, the network fee, for every Enygma transaction on the Rayls Public Chain
The problem: On a public blockchain, everyone can see your payments
Most public blockchains are transparent by design: anyone can look up who paid whom, how much and when, and the record never goes away. That is fine for a public ledger, but not for everyday payments that should stay between the people involved.
The solution: Each user decides how much to reveal
Enygma encrypts every payment with post-quantum keys, then lets people choose their privacy. In retail Enygma, the sender decides how widely to hide who a payment is for, from naming the recipient outright to revealing nothing at all. More privacy means more data for wallets to download, so each user picks the balance that suits them.
Three private primitives
Payments, asset exchange and auctions, each settled onchain without exposing the parties or the amounts.
$RLS, the gas token for Enygma transactions
$RLS is used only to pay the gas for Enygma transactions: private payments, swaps and sealed bids. Gas is the small fee a blockchain charges to process a transaction. Everything else on the Rayls Public Chain still pays its gas in $USDr, the chain’s standard gas token, pegged 1:1 to the US dollar. The demo works the same way: before you confirm any private action, it shows the network fee in $RLS.
How Enygma Retail compares
Enygma Retail against the privacy tools people use today, compared on what they hide, how much you can choose to reveal and what you can share with an auditor.
Cutting-edge research, published in the open
Enygma is designed in the open: presented at two leading academic security conferences, IEEE Security and Privacy and Financial Cryptography, free to read on the IACR Cryptology ePrint Archive (the open archive of the International Association for Cryptologic Research), and open source. Every paper describes a quantum-private design, in which payer, payee and amount stay hidden even from an adversary with a quantum computer.
Try Enygma on the Rayls Public Chain
Send, swap and bid privately in the demo, with real post-quantum encryption and gas paid in $RLS, then read how Enygma works in the docs.
Questions about Enygma
Is Enygma quantum-safe?
Enygma is quantum-private: even an adversary with a quantum computer cannot infer the payer, the payee or the amount of a transfer. Key agreement, the step where two parties agree a secret key, is post-quantum. In retail Enygma, every user's view key is an ML-KEM key. ML-KEM, short for Module-Lattice-Based Key-Encapsulation Mechanism, is a way to agree a secret key that quantum computers are not known to break, standardised in 2024 by NIST, the US National Institute of Standards and Technology. In institutional Enygma, auditor key exchange uses ML-KEM too. The zero-knowledge proofs currently use Groth16, a widely used proof system, which keeps transactions private but is not yet quantum-secure against forgery; moving to a quantum-secure proof system is on the roadmap.
What does the chain actually see?
Commitments, nullifiers and zero-knowledge proofs. The amount sits inside a commitment, a sealed value the chain can check but not read. The nullifier is a one-time marker that stops the same funds being spent twice. The zero-knowledge proof shows the transfer balances, all without revealing who paid whom or how much.
Where is Enygma live today?
Enygma Retail is deployed on the Rayls Public Chain, the permissionless, Ethereum-compatible (EVM) chain anyone can use, and that is where the demo runs. Enygma transactions there pay their gas, the network fee, in $RLS; every other transaction on the chain pays in $USDr, its standard gas token. Institutional Enygma is in production in the Rayls Sovereign chains institutions run. The retail design is described in a forthcoming paper.
What is the difference between retail and institutional Enygma?
Retail Enygma is note-based, with money held as sealed digital notes, and built for end users: every user holds an ML-KEM view key to find and read payments and a separate spend key to move funds, chooses their own level of privacy, and can pay, swap or bid privately. Institutional Enygma is account-based, like a bank ledger, and built for banks, central banks and market infrastructures that settle with each other. See the Enygma Institutional page for that edition.