VERIFIABLE CODEBASE FACTS
We audited MNDO's identity generation, dictionary combinatorics, cryptography, Signal messaging, voice notes, and encrypted storage. Every figure below is mathematically grounded, code-inspected, and defensible.
Audited against MNDO main codebase
888 × 1,000 × 16⁶ unique combinations
~3.4 × 10³⁸ BIP-39 entropy states
All humans ever born (~117B estimate)
Signal Double Ratchet + SQLCipher
Pure client-side offline keygen
Every initial username is formatted as [Adjective] [Noun] #[Hex6]. Combining 888 unique adjectives, 1,000 unique nouns, and 16,777,216 hex suffixes produces nearly fifteen trillion human-readable handles.
The Population Reference Bureau estimates roughly 117 billion humans have ever been born on Earth. MNDO's username namespace of 14.9 trillion is approximately 127 times larger than that total.
Against the global population of roughly 8.2 billion people, MNDO can provide over eighteen hundred unique, human-readable username combinations per living human without exhausting its namespace.
Code inspection confirms the dictionary contains exactly 888 unique adjectives and 1,000 unique nouns. This yields 888,000 distinct word pairs before the 6-character hex suffix is appended.
Each username appends a 6-character hexadecimal discriminator (#abcdef). With 16 possibilities per hex character (0-9, a-f), the suffix alone provides over 16.7 million unique tags per word pair.
MNDO hashes the Ed25519 public key with SHA-256, but the generator only takes the first 7 bytes: bytes 0–1 index the adjective, bytes 2–3 index the noun, and bytes 4–6 form the hex suffix.
Because dictionary indexing compresses the 56-bit hash slice, the visible username represents log₂(14,898,167,808,000) ≈ 43.76 bits of distinguishability. The username is a friendly display handle; the 32-byte Ed25519 public key is the true cryptographic identity.
With no central registration server, username collisions are mathematically possible. In a 14.9T space, the birthday paradox predicts a 50% chance of at least one pair sharing a handle at ~4.5M users. Because messaging routes to keys (not handles), collisions do not impact security.
No registration database is queried to generate the initial username. Same mnemonic → same seed → same Ed25519 public key → same username. It can be computed on an air-gapped device in under a millisecond.
MNDO generates a 12-word BIP-39 mnemonic representing 128 bits of cryptographic entropy plus a 4-bit SHA-256 checksum. That yields 340,282,366,920,938,463,463,374,607,431,768,211,456 possible states.
The BIP-39 mnemonic is stretched using PBKDF2 with HMAC-SHA512 and 2,048 iterations to produce a 64-byte (512-bit) master seed. The first 32 bytes are sliced to initialize the master Ed25519 keypair.
The master root identity uses Ed25519 on Curve25519. Public keys are 32 bytes (256 bits, 64 hex characters) and digital signatures are 64 bytes, providing 128-bit security against all known attacks.
The master Ed25519 key and the Nostr relay transport key are cryptographically separated. MNDO derives the Nostr private key by computing SHA-256(mnemonic + '_nostr'). Transport compromise cannot leak the master identity.
MNDO signs a delegation statement formatted as 'MNDO-BIND:<nostr_pubkey>:<timestamp>' using the master Ed25519 key. Peers can verify with mathematical certainty that a given Nostr transport key is authorized by that master identity.
Presence updates are Nostr events signed by the Nostr transport key, with an inner payload containing a masterSig signed by the Ed25519 root identity. Status cannot be spoofed by relay operators.
The pipeline is: Plaintext → MNDO Message Envelope → libsignal Double Ratchet Encryption → Nostr Event Kind 4444 → Relay Mesh. Relays only ever receive and forward ciphertext.
Nostr provides decentralized relay transport, event delivery, and pubkey addressing. Signal provides cryptographic sessions, prekey distribution, and ratcheting. Relays cannot decrypt or tamper with payloads.
The Signal Double Ratchet derives a fresh symmetric key for every single message and steps Diffie-Hellman ratchets. Exposing one message key never unlocks prior messages (Forward Secrecy) or future ones (Post-Compromise Security).
Devices publish Signal PreKey bundles: Identity Public Key, Signed PreKey + signature, One-Time PreKeys, and Registration ID. Any peer can establish an encrypted chat session even when the recipient is offline.
MNDO cleanly partitions traffic across Nostr event kinds: 4444 (Encrypted Messages), 21111 (Ephemeral Presence), 0 (Profile Metadata), 10446 / 14446 (Signal PreKey Bundles), and 24242 (Blossom Media Auth).
MNDO does not stream raw audio. Voice notes are encrypted locally before upload using AES-256-GCM with a newly generated 256-bit key and an unpredictable 96-bit nonce.
After encryption, MNDO computes SHA-256 over the ciphertext bytes. The resulting hash serves as the immutable content identifier on Blossom storage servers, verifying tamper-proof delivery.
Encrypted voice recording bytes are stored on Blossom servers, while the 256-bit key and 96-bit nonce needed for decryption are transmitted inside the Signal end-to-end encrypted message.
Persistent client-side data uses Drift over SQLite backed by SQLCipher. The 256-bit database encryption key is generated via Random.secure() and sealed in the hardware keystore via flutter_secure_storage.
MNDO executes 'PRAGMA cipher_memory_security = ON;' during database initialization. This instructs SQLCipher to zero out decrypted cache pages from RAM when freed, preventing memory dump inspection.
The default build connects to relay.damus.io, nos.lol, and relay.snort.social simultaneously. Messages route through any active relay; the loss of one or two relays does not halt communication.
What MNDO genuinely delivers is extraordinary: 14.9 trillion human-readable usernames (~127× all humans who ever lived), 2¹²⁸ identity entropy states (~3.4 × 10³⁸), 0 central servers, and per-message Double Ratchet keys.
Every formula, dictionary length, encryption parameter, and key derivation routine on this page was directly audited from these files in the MNDO repository:
Contains 888 unique adjectives and 1,000 unique nouns
BIP-39 mnemonic, Ed25519 derivation, Nostr binding, deterministic usernames
libsignal Double Ratchet sessions, PreKeys, X3DH envelope packaging
Blind relay transport across kinds 4444, 21111, 0, and prekeys
Ephemeral AES-256-GCM encryption with 96-bit nonce and SHA-256 content hash
Drift SQLite + SQLCipher with 256-bit key and memory security PRAGMA
From our 1ms client-side key derivation to Signal ratcheting over Nostr relay meshes, dive into our technical diagrams and interactive architecture guides.