Infrastructure Decentralized routing, discovery & storage

DNA Nodus

The Nodus Network is the decentralized networking layer of the DNA protocol. It provides peer discovery, routing, identity resolution, and distributed storage without relying on centralized servers.

Nodus is built as a post-quantum secure distributed hash table (DHT) network where nodes cooperate to locate peers, route encrypted messages, and store temporary data across the network. All operations are cryptographically signed (ML-DSA-87), with built-in support for key encapsulation (ML-KEM-1024) and AES-256-GCM encryption.

Instead of relying on a central infrastructure, the Nodus network forms a self-organizing mesh of nodes that collectively maintain the routing and discovery layer used by DNA services such as DNA Connect and DNA Identity.

No central servers. No single point of failure. Open infrastructure · Post-quantum secure

Three-Tier Architecture

The Nodus network operates using a three-tier architecture designed to separate core network operations, client access, and validation.

Tier 1 — Nodus to Nodus

The node backbone of the network. Nodus nodes communicate directly with each other using TCP and UDP.

This layer maintains the distributed hash table, performs peer discovery, and handles message routing across the global network. Tier 1 nodes form the core mesh infrastructure that keeps the network decentralized and resilient.

Tier 2 — Client to Nodus

The client access layer. Applications such as DNA Connect connect to Nodus nodes over TCP.

Through this connection, clients can resolve DNA identities, send encrypted messages, retrieve offline messages, publish or fetch distributed data, and communicate with other peers through the network. Clients do not communicate directly with each other — they interact with the Nodus network through connected nodes.

Tier 3 — Witness Layer

A higher-trust validation layer built on BFT consensus with PQ cryptographic proofs.

Tier 3 nodes provide transaction witnessing, attestation, and trust anchoring for operations requiring stronger guarantees than DHT storage alone — such as financial transactions and identity verification.

Distributed Hash Table

At its core, Nodus operates as a distributed hash table. The DHT allows nodes to locate information and peers without centralized coordination.

Each node is responsible for a portion of the keyspace and can store or route data associated with those keys. This mechanism allows the network to:

  • Locate identities across the network
  • Route messages between peers
  • Distribute temporary storage across nodes
  • Maintain peer discovery without central directories

All operations are performed collectively by the network nodes.

Identity Resolution

DNA identities are resolved through the Nodus network. When a client looks up a DNA name, the request is routed through the DHT until it reaches the nodes responsible for that identity's record — no centralized registries or servers involved.

Each identity record contains the data needed to establish secure communication:

  • Dilithium5 public key — verifies signatures and proves ownership
  • Kyber1024 public key — enables post-quantum key encapsulation
  • Wallet addresses — Cellframe, Ethereum, BSC, Solana, TRON
  • Presence status — online, offline, or last-seen timestamp

Offline Message Delivery

The Nodus network supports offline message delivery. When a recipient is offline, encrypted messages are temporarily stored across distributed storage nodes until the recipient reconnects and retrieves them.

  • 7-day TTL — messages persist on the network for up to 7 days
  • End-to-end encrypted — storage nodes see only encrypted blobs
  • Automatic retrieval — clients pull pending messages on reconnect
  • Multi-node replication — messages stored on k closest nodes for redundancy

This enables asynchronous communication while maintaining full decentralization — no central inbox server, minimal routing metadata.

Decentralized by Design

Nodus removes the need for centralized messaging servers. Instead of relying on a single infrastructure provider, the network operates as a global peer-to-peer mesh where nodes collectively maintain routing, discovery, and temporary storage.

This design improves:

  • Resilience — no single point of failure
  • Censorship resistance — no central authority to block
  • Availability — high availability through distributed architecture
  • Privacy — private messages are stored as encrypted blobs that nodes cannot read

The network continues to function as long as nodes remain connected.

Transport Layer

Post-quantum authenticated peer-to-peer circuits over the Nodus network. Establish direct encrypted connections between DNA identities for file transfer, voice signalling, and general-purpose data tunneling.

CIRCUIT ROUTING
Same-Nodus (2 hops)
Client A → Nodus → Client B
Cross-Nodus (3 hops)
Client A → Nodus A → Nodus B → Client B
Layer 1 — Client↔Nodus: Kyber1024 + AES-256-GCM
Layer 2 — Nodus↔Nodus: Kyber1024 + AES-256-GCM
Layer 3 — Circuit E2E: Kyber1024 + AES-256-GCM (onion)

File Transfer

Send files directly to another DNA user. Data is chunked into 64 KiB frames and streamed over the circuit — no central file server.

Voice & Video

Circuit infrastructure provides the signalling channel for future voice and video calls. Media transport over UDP is planned.

P2P Tunneling

Any application can open an authenticated bidirectional byte-stream between two DNA identities. General-purpose transport primitive.

Auto Routing

Circuits are addressed by DNA identity. The network resolves peer location and routes automatically — no manual configuration.

ParameterValuePurpose
Circuit Hops2–3Same-nodus (2) or cross-nodus (3) routing
Frame Size64 KiB maxMaximum payload per circuit data frame
Session Circuits16 maxConcurrent circuits per client session
Server Circuits256 maxGlobal inter-node circuit limit per server
Open Timeout5 secondsCircuit establishment timeout

Role in the DNA Ecosystem

Nodus is the infrastructure layer of the DNA ecosystem. While DNA applications provide user-facing functionality, Nodus provides the underlying decentralized networking system that connects identities and peers.

DNA Identity

Decentralized identity resolution — human-readable names tied to cryptographic key pairs, resolved through the Nodus DHT.

DNA Connect

Post-quantum encrypted communication — messages routed and delivered through the Nodus network with offline support.

Future Applications

DNAC digital cash and any future decentralized application can build on Nodus — forming a post-quantum capable infrastructure stack.

Technical specifications

Every protocol operation is cryptographically signed and verified.

Parameter Value Purpose
Keyspace 512-bit (SHA3-512) DHT address space for node and data routing
Replication Factor k = 8 Data stored on 8 closest nodes for redundancy
Data TTL 7 days Temporary storage lifetime for messages and records
Wire Protocol CBOR Compact binary encoding over framed TCP/UDP
Signing ML-DSA-87 (Dilithium5) All protocol operations signed and verified
Encryption ML-KEM-1024 + AES-256-GCM Post-quantum key exchange and payload encryption

Open source under Apache 2.0 — all post-quantum cryptographic primitives are built in-house with no external dependencies. See source code.

Get DNA Connect

Encrypted messaging, multi-chain wallet, and decentralized identity — one app, three platforms.

Open source — GitLab · GitHub

Join the movement

Download DNA Connect, join the conversation, and find a piece of the project you want to improve. Every meaningful contributor once started as a community member.