Somewhere, right now, an app is being banned.
A chat log is being handed over.
A bank account is being frozen.
It all works because everything you use has an off switch.
Common thread: one company, one server, one throat to choke. Umbra removes the throat.
Step into
the shadow.
Umbra · one seed · three weapons
You type 13 bytes.
This is not a video. Your scroll drives a real X25519 exchange and a real ChaCha20-Poly1305 seal happening in this tab. The hex is the actual envelope.
UMB is proof-of-work on yespower: memory-hard, CPU-friendly, hostile to ASIC farms. Ordinary hardware mines real blocks, and masternode quorums lock each one so a 51 percent reorg dies on arrival.
This terminal is not a mockup. Your browser is running real X25519 key exchanges and real ChaCha20-Poly1305 seals on example messages while you read this. The hex is the actual envelope. This is what leaves a device when someone texts on Umbra.
13 bytes of plaintext. It never leaves your device in this form. Everything that follows happens locally, before a single packet is sent.
A brand new keypair for this one message. It is never reused, so no two envelopes can be linked by their keys. The private half is thrown away after sealing.
Diffie-Hellman on Curve25519. Only her private key can reproduce this number. An all-zero result is rejected outright: the low-order point guard.
One secret becomes two keys via HKDF-SHA256 with the domain label umbra-msg-v1. The detect tag lets her client spot mail addressed to her without decrypting anything.
ChaCha20-Poly1305 seals the payload. The AAD binds the ephemeral key and the detect tag into the ciphertext, so tampering with the envelope breaks authentication. A 16 byte auth tag is appended.
89 bytes on the wire for this message. No sender name, no sender key, no addressee on the envelope. Only her private sealing key can open it.
Your traffic tunnels through two independent masternodes. The entry knows your IP but not your destination; the exit knows your destination but not you. Payment is a transaction, not an account, and 20 percent of it burns forever.
Handshake: Noise_IK per hop, packets padded to one constant size.
Safety: verify-before-route plus a dead man's switch on stalls.
Payment: on-chain subscription, 20% burned to OP_RETURN.
One seed derives three purpose-built keys through domain-separated derivation. Claim a name on-chain and @yourname resolves to your payment address and chat keys at once; commit-reveal registration means nobody can front-run or seize it.
Masternodes relay messages, store mail, mix traffic, and serve tunnels. They take 35 percent of every block plus a 15 percent storage node reward weighted by tier.
No public IP required. The lightest way to earn: weight 1 in payouts and votes.
Full relay, storage, and mixing. Weight 3: paid 3 blocks in a row. VPN relay and exit eligible.
Weight 8: paid 8 blocks in a row, 8x share of storage node rewards. Backbone of the quorums.
No company. No central server. No identity to demand. Nothing readable on the wire. The case is public and the network is already running.