Skip to content
LATENS

§00Confidential execution layer · Solana

Compute on data
you never see.

An encrypted execution layer on Solana. Fully homomorphic encryption and machine learning over data that is never decrypted - not by validators, not by us.

Ciphertext inspector

live

Plaintext · client only

412.75 SOL

Token balance

On the wire

3.1 KB

~248× expansion

00005e70efbfab1f6404070f8a70b3d5ffa8bef415b91617ceef
00187d9514c7f619699b3b8b4bbf86e2aa7b8475bf35399a3670
00300c95152b2d1fc7c712a5b1e990cae0db3bf87a5335e1f94a
00488027a7c3598db7885007197b8ac3d1b42ec9561f8a8bf63f
0060f63739313cb07ba1d492bcef49837eed32d38eb473075c5e
00783e5d6151a19b970e11e721ff5fe6a6b92c0cabc104d54faf
00902a324e048ef5b9dae6135f5521b15d8258f8c875082b53d4

Validators see this. Nothing else.

TFHE · 128-bit

fhe_addfhe_mulbootstrapthreshold_decryptsealed_stateblind_matchencrypted_inferencekey_switchnoise_budget
fhe_addfhe_mulbootstrapthreshold_decryptsealed_stateblind_matchencrypted_inferencekey_switchnoise_budget

§01Devnet, today

Privacy with a latency budget, not a research paper.

Fully homomorphic encryption spent a decade being too slow to matter. It stopped being too slow. These are v0.4.1 devnet measurements.

210ms

Median confidential transfer

encrypt → evaluate → threshold-decrypt, devnet p50

3.1KB

Ciphertext per encrypted balance

TFHE, 64-bit integer, packed

64/128

Threshold decryption committee

no single node can decrypt state

0bytes

Plaintext written on-chain

inputs, state and outputs stay sealed

§02Architecture

Four layers.
Only one of them
ever holds a key.

Latens does not replace Solana. It attaches an encrypted data path to it, so ordering and settlement stay where liquidity already is.

  1. 01

    Client keyring

    Keys never leave the device. The client encrypts inputs and holds the only path to a plaintext result.

  2. 02

    Solana settlement

    Ordering, fees and account ownership stay on Solana. Latens adds a ciphertext field, not a new chain.

  3. 03

    Evaluator mesh

    Stateless workers that apply homomorphic circuits to ciphertext. They can compute; they cannot read.

  4. 04

    Threshold committee

    A t-of-n committee holds shares of the decryption key. Output is revealed only to the address that owns it.

§03Evidence

What it costs to never decrypt.

Three questions decide whether encrypted execution is usable: is the trend going the right way, where does the time actually go, and does it scale out.

§03.1Figure

The cost of a homomorphic operation, 2016 → 2026

Bootstrapping - the step that resets noise and makes unbounded computation possible - has fallen by three orders of magnitude.

  • Bootstrapping
  • Encrypted MLP inference

Public TFHE/CKKS benchmark literature 2016-2024; 2026 modelled from the Latens devnet accelerator roadmap. Log scale.

§03.2Figure

Where a confidential request spends 210 ms

Consensus and threshold decryption are fixed costs. Only the evaluation term grows with circuit depth.

  • Client encrypt
  • Consensus + route
  • Homomorphic evaluate
  • Threshold decrypt

Latens devnet v0.4.1, 10k samples per operation, p50 milliseconds. Consensus term measured against Solana devnet.

§03.3Figure

Throughput against evaluator count

Encrypted execution scales out linearly until the decryption committee becomes the bottleneck at ~100 nodes.

  • Latens (encrypted)
  • Plaintext baseline

Encrypted throughput scales linearly to 100 evaluator nodes, then saturates on committee bandwidth. Devnet v0.4.1, transactions/second.

§04Alternatives

Everything else asks you to trust something.

Enclaves ask you to trust a chip vendor. Zero-knowledge proofs hide your inputs but cannot compute over someone else's. Homomorphic encryption removes the question.

PropertyPlaintext L1TEE / enclaveZK proofsLatens (FHE)
Data hidden from validatorsnoyesyesyes
Arbitrary compute on hidden datayesyesnoyes
No trusted hardware vendoryesnoyesyes
Shared state between mutually blind partiesyesnonoyes
Post-quantum assumptionsnononoyes

§05Roadmap

Shipping order.

Each phase is gated on the previous one being measured, not announced.

  1. P0shipped

    Devnet

    TFHE evaluator, 32-node threshold committee, encrypted SPL-compatible transfers.

  2. P1active

    Sealed programs

    Rust SDK for encrypted account state; homomorphic ALU exposed as a Solana CPI target.

  3. P2next

    Encrypted inference

    Quantised transformer blocks over ciphertext; model weights sealed to the committee.

  4. P3planned

    Mainnet-beta

    128-node committee, hardware acceleration, permissionless evaluator onboarding.

§06Next

Encrypt a number. Add to it without ever opening it.

The sandbox runs a simulation of the full pipeline in your browser - keygen, encryption, homomorphic evaluation, noise budget, threshold decryption - with the timings we measure on devnet.