# Shielded State Sync

**URL:** https://forum.anoma.net/c/cryptography-zoo/shielded-state-sync/55.md

[Latest](https://forum.anoma.net/latest.md) · [Categories](https://forum.anoma.net/categories.md) · [Tags](https://forum.anoma.net/tags.md)

---

## [About the Shielded State Sync category](https://forum.anoma.net/t/about-the-shielded-state-sync-category/936)

<div class="topic-metadata">

**Author:** [@vveiln](https://forum.anoma.net/u/vveiln)\
**Replies:** 0

</div>

---

## [Brief summary of where we are now](https://forum.anoma.net/t/brief-summary-of-where-we-are-now/1548)

<div class="topic-metadata">

**Author:** [@kike](https://forum.anoma.net/u/kike)\
**Replies:** 5\
**Last updated:** [June 3, 2025, 9:43am UTC](https://forum.anoma.net/t/brief-summary-of-where-we-are-now/1548 "2025-06-03T09:43:17Z")

</div>

We have spent quite a bit of time on improving synchronisation of notes for the multi-asset shielded pool of Namada. In the last months, we have gone from brainstorming to propose a concrete solution, based on Fuzzy Mes…

---

## [Shielded StSync Architectures](https://forum.anoma.net/t/shielded-stsync-architectures/1152)

<div class="topic-metadata">

**Author:** [@batconjurer](https://forum.anoma.net/u/batconjurer)\
**Replies:** 2\
**Last updated:** [February 11, 2025, 9:33am UTC](https://forum.anoma.net/t/shielded-stsync-architectures/1152 "2025-02-11T09:33:56Z")

</div>

Shielded State Sync Server Architectures Depending on whether we end up choosing a VM based TEE or process based TEE (namely SGX), we will have two different architectures for the server providing FMD. The components wil…

---

## [Forward secrecy via key rotation on the servers](https://forum.anoma.net/t/forward-secrecy-via-key-rotation-on-the-servers/1160)

<div class="topic-metadata">

**Author:** [@kike](https://forum.anoma.net/u/kike)\
**Replies:** 0\
**Last updated:** [February 7, 2025, 1:54pm UTC](https://forum.anoma.net/t/forward-secrecy-via-key-rotation-on-the-servers/1160 "2025-02-07T13:54:19Z")

</div>

Forward secrecy in the context of the FMD-based sync solution states: If the adversary corrupts a detection server at time t\_c, the identity of recipients of messages sent at some past time t\<t\_c is not leaked. We ca…

---

## [FMD+TEE proposal: threat model, parameters and requirements](https://forum.anoma.net/t/fmd-tee-proposal-threat-model-parameters-and-requirements/1118)

<div class="topic-metadata">

**Author:** [@kike](https://forum.anoma.net/u/kike)\
**Replies:** 3\
**Last updated:** [February 5, 2025, 3:39pm UTC](https://forum.anoma.net/t/fmd-tee-proposal-threat-model-parameters-and-requirements/1118 "2025-02-05T15:39:03Z")

</div>

The purpose of this post is to discuss and concretize the threat model, the parameters (what are they, which are system parameters and which are receiver-defined), and the requirements and features we want to offer with …

---

## [SGX attacks and their consequences](https://forum.anoma.net/t/sgx-attacks-and-their-consequences/1146)

<div class="topic-metadata">

**Author:** [@vveiln](https://forum.anoma.net/u/vveiln)\
**Replies:** 0\
**Last updated:** [February 4, 2025, 4:20pm UTC](https://forum.anoma.net/t/sgx-attacks-and-their-consequences/1146 "2025-02-04T16:20:36Z")

</div>

This post contains description and analysis of some SGX attacks and thoughts about consequences of TEE attacks for shielded state sync in general. I’m planning to look more into attacks on other TEEs. SGX attack basics M…

---

## [Intel TDX overview](https://forum.anoma.net/t/intel-tdx-overview/1082)

<div class="topic-metadata">

**Author:** [@vveiln](https://forum.anoma.net/u/vveiln)\
**Replies:** 5\
**Last updated:** [January 30, 2025, 6:41am UTC](https://forum.anoma.net/t/intel-tdx-overview/1082 "2025-01-30T06:41:13Z")

</div>

Intel TDX (Trust Domain Extensions) is a confidential computing architectural feature launched in 2023 with a new generation of Intel Xeon processors. It is similar to Intel SGX in what it provides: hardware-enabled conf…

---

## [Shorter FMD public keys - is it possible?](https://forum.anoma.net/t/shorter-fmd-public-keys-is-it-possible/1074)

<div class="topic-metadata">

**Author:** [@kike](https://forum.anoma.net/u/kike)\
**Replies:** 5\
**Last updated:** [January 29, 2025, 11:11am UTC](https://forum.anoma.net/t/shorter-fmd-public-keys-is-it-possible/1074 "2025-01-29T11:11:44Z")

</div>

In the FMD1 and FMD2 constructions of Fuzzy Message Detection, to achieve a minimum false-positive rate p=2^{-\\gamma}, the number of ElGamal public keys is \\gamma. If for example we fix \\gamma = 16 and ElGamal encryptio…

---

## [ZKPs for FMD flag consistency](https://forum.anoma.net/t/zkps-for-fmd-flag-consistency/1073)

<div class="topic-metadata">

**Author:** [@kike](https://forum.anoma.net/u/kike)\
**Replies:** 1\
**Last updated:** [January 22, 2025, 3:33pm UTC](https://forum.anoma.net/t/zkps-for-fmd-flag-consistency/1073 "2025-01-22T15:33:50Z")

</div>

Context A proposal for the private state synchronization problem using Fuzzy Message Detection (FMD) and Trusted Execution Environments (TEEs) is put forward in this thread. To send message m to user \\mathsf{uid}, the i…

---

## [VE + identity consistency](https://forum.anoma.net/t/ve-identity-consistency/1085)

<div class="topic-metadata">

**Author:** [@vveiln](https://forum.anoma.net/u/vveiln)\
**Replies:** 0\
**Last updated:** [January 20, 2025, 12:12pm UTC](https://forum.anoma.net/t/ve-identity-consistency/1085 "2025-01-20T12:12:10Z")

</div>

For Anoma, shielded in-band distribution of resources requires encryption used to provide confidentiality to be verifiable in circuits. With the addition of shielded state synchronisation, that conceptually is very simil…

---

## [Anoma/Namada SSS Requirements](https://forum.anoma.net/t/anoma-namada-sss-requirements/1065)

<div class="topic-metadata">

**Author:** [@vveiln](https://forum.anoma.net/u/vveiln)\
**Replies:** 4\
**Last updated:** [January 20, 2025, 10:04am UTC](https://forum.anoma.net/t/anoma-namada-sss-requirements/1065 "2025-01-20T10:04:10Z")

</div>

Since we want to have shielded state synchronisation for both Anoma and Namada, but they have quite different requirements, it makes sense to write the requirements down and keep track of them, so that we can more effici…

---

## [FMD + TEE for private state sync proposal](https://forum.anoma.net/t/fmd-tee-for-private-state-sync-proposal/934)

<div class="topic-metadata">

**Author:** [@vveiln](https://forum.anoma.net/u/vveiln)\
**Replies:** 15\
**Last updated:** [January 16, 2025, 9:05am UTC](https://forum.anoma.net/t/fmd-tee-for-private-state-sync-proposal/934 "2025-01-16T09:05:43Z")

</div>

This post is just an inspired draft of an idea without concrete estimations and algorithms. The prompt in my head was “what would be a cool solution”, so further investigation required to know if “cool” is also possible …

---

## [FHE + threshold decryption proposal for private state sync](https://forum.anoma.net/t/fhe-threshold-decryption-proposal-for-private-state-sync/938)

<div class="topic-metadata">

**Author:** [@kike](https://forum.anoma.net/u/kike)\
**Replies:** 0\
**Last updated:** [December 12, 2024, 11:09am UTC](https://forum.anoma.net/t/fhe-threshold-decryption-proposal-for-private-state-sync/938 "2024-12-12T11:09:35Z")

</div>

Summary. This is a proposal for the private state sync problem. It leverages fully homomorphic encryption (FHE) and threshold decryption. Roles. A set of n users (which is ever growing) that want to receive messages ano…

---

## [Private State Synchronisation Reading Materials](https://forum.anoma.net/t/private-state-synchronisation-reading-materials/937)

<div class="topic-metadata">

**Author:** [@vveiln](https://forum.anoma.net/u/vveiln)\
**Replies:** 1\
**Last updated:** [December 12, 2024, 10:59am UTC](https://forum.anoma.net/t/private-state-synchronisation-reading-materials/937 "2024-12-12T10:59:01Z")

</div>

Accumulating a list of resources that might be helpful in solving this problem. Feel free to respond with more materials. I will also try to keep the main post updated so that it contains all links from the thread: FMD: …

---

## [Known solutions for private state synchronization](https://forum.anoma.net/t/known-solutions-for-private-state-synchronization/887)

<div class="topic-metadata">

**Author:** [@kike](https://forum.anoma.net/u/kike)\
**Replies:** 0\
**Last updated:** [December 5, 2024, 5:40pm UTC](https://forum.anoma.net/t/known-solutions-for-private-state-synchronization/887 "2024-12-05T17:40:09Z")

</div>

Private state synchronization In this post I list and briefly review some of the existing solutions to the private state synchronization problem. The list is non-exhaustive, though. Edits: (06/12/24) expanded problem s…

---

## [Oblivious Message Retrieval](https://forum.anoma.net/t/oblivious-message-retrieval/755)

<div class="topic-metadata">

**Author:** [@alberto](https://forum.anoma.net/u/alberto)\
**Replies:** 4\
**Last updated:** [September 13, 2024, 7:29am UTC](https://forum.anoma.net/t/oblivious-message-retrieval/755 "2024-09-13T07:29:19Z")

</div>

Have we looked into algorithms to find which encrypted transactions can be decrypted by “me”? I only know of this work so far @cwgoes @xuyang @Michael
