Privacy & security software
A postern is the small gate you keep for yourself.
Postern Labs builds privacy-first, post-quantum software — an OS, a store, a wallet, and the tools around them — sold the honest way. No tracking, no analytics, no data business. The mobile side is free forever.
What we make
Software that assumes the network is hostile.
Built on permissive Linux, sealed client-side, and priced so the privacy layer is never the thing you pay for.
Postern OS — mobile
The OS and its apps, at no cost, permanently. Free versions may show contextual ads that carry no telemetry and build no profile; a key removes them.
Postern OS — desktop
The desktop suite runs free for two years, then continues with a key. Keys never brick data you already own — your files stay yours either way.
Enterprise
Shield containers and a cloud control plane for organizations that need managed deployment, policy, and support.
Sotto & Vedetta
Sealed messaging and monitoring. Content is encrypted on the device before anything leaves it.
Tolmach
Translation that runs against your text without shipping it to an advertising company.
NoporIS · Gramota · Sloboda
Gate, credential, and access tooling — the identity surface for organizations that can't outsource trust.
How backups work
Filecoin only ever sees ciphertext.
Private user backups are stored on Filecoin, but sealed client-side with the Postern seal (XChaCha20-Poly1305) before anything leaves the device. The keys never go with them.
Integrity and authenticity are post-quantum and come from the Bloch side: a SHAKE-256 manifest signed with ML-DSA-65 ‖ Falcon, anchored to the ownerless base as an ordinary zero-value on-chain commitment.
- Confidentiality
- Postern seal, applied on your device
- Integrity
- SHAKE-256 manifest
- Signature
- ML-DSA-65 ‖ Falcon
- Anchor
- Zero-value commitment on Bloch
- Storage sees
- Ciphertext only — never keys, never plaintext
The thing we do not own
Postern Labs builds on Bloch-SIS-PoW. It does not own it.
Bloch-SIS-PoW is an ownerless, post-quantum, pure-proof-of-work base — no owner, no foundation, no token sale, no official website. Postern Labs holds no ownership of, representation of, or prerogative over the protocol, and maintains no website for it. Our products anchor to it the way a business anchors to Bitcoin: by using it, not by controlling it.
Ownerless base protocol
Hashrate secures it. Coins don't vote.
Bloch-SIS-PoW is a post-quantum BlockDAG secured by ordinary SHA-256d proof-of-work — the same work function that secures Bitcoin, so the ASICs that already exist can mine it unmodified.
Why Bloch
Post-quantum signatures, Bitcoin-class work.
Most chains pick one: a novel consensus with untested security, or mature proof-of-work with signatures a quantum computer eventually breaks. Bloch takes the mature work function and replaces the signature layer.
The signature layer is lattice-based
ML-DSA-65 and Falcon, not secp256k1. That is the part of Bitcoin a cryptographically relevant quantum computer would break first, and it is the part Bloch replaces.
The work function is unchanged
Double SHA-256, Bitcoin-style hashcash, little-endian target compare from height 0. Existing SHA-256 ASICs and rented hashrate mine it with stock firmware — no special client.
It is a BlockDAG, not a chain of one
Blocks that arrive in parallel are ordered rather than orphaned, with a k-parameter of 10. Throughput comes from ordering concurrent work, not from trusting a committee.
Nobody is in charge
No foundation, no governance token, no upgrade key. Coins do not vote. Changes happen the way they do in Bitcoin — operators choose what to run, and hashrate settles it.
The chain
Live mainnet, and small enough to say so.
Snapshot taken 1 August 2026, 15:11 −03 from a read-only node. These are figures, not a promise — check the explorer for the current state.
Supply
21 billion nominal, and not hard-capped.
The emission schedule is disclosed in full, including the parts that are unusual and the part that is a founder allocation.
- Nominal supply
- 21,000,000,000 BLCH — billion, not million
- Hard cap
- None. A perpetual tail of 100 BLCH per block continues after the halvings, Monero-style, so miners are never paid by fees alone
- Initial reward
- 8,400 BLCH per block
- Halving
- Every 1,036,800 blocks
- Block target
- 30 seconds
- Founder premine
- 17% — 3.57 B BLCH, locked behind a 10-year cliff and a 40-year vest, structurally passive and disclosed rather than discovered
- Carryover
- 413,743 UTXOs at 8,400 BLCH were carried into the current chain's opening balances
Mine it
Any SHA-256 miner works, unmodified.
Standard Stratum V1 throughout — mining.subscribe, mining.authorize, mining.notify, mining.submit. No special client, no ownership proof, no seed.
URL stratum+tcp://stratum.posternpool.com:3336 # no DNS on the rig? use the IP instead: stratum+tcp://192.248.190.123:3336 Worker bloch1q…your_own_address # bare, no .worker Password x Algorithm sha256d
minerd -a sha256d \ -o stratum+tcp://stratum.posternpool.com:3336 \ -u bloch1q…your_own_address \ -p x \ -t <threads>
Run a node
The only way to actually verify any of this.
Serve your own stratum and point your rigs at it. A protocol with nine peers needs operators far more than it needs miners on someone else's endpoint.
The reachable public endpoint exists as a convenience, not as infrastructure. It is an ordinary node. Treat it as one.
bloch --mine \ --miner-address bloch1q… \ --stratum \ --stratum-addr 0.0.0.0:3333
Ownership
There is no company behind this protocol.
Bloch-SIS-PoW is ownerless and is not a Postern Labs product. It lives at gitlab.com/blochsispow-group/BlochSISPoW-project — written as text on purpose, because there is no official site to link to. Postern Labs holds no ownership of, representation of, or prerogative over the protocol, and maintains no website for it.
The Telegram group about the protocol is run by Postern Labs and speaks for Postern Labs only. The protocol itself has no official channel, and this page is not one.
Risks
What is actually wrong with it today.
Stated plainly, because a page that only lists strengths is not telling you enough to decide.
51%-attackable
At 12.49 TH/s the network is small enough that rentable hashrate could reorganize it. This is not theoretical and it is not fixed by anything but more honest hashrate.
Unaudited
No external audit has been completed. The cryptography is standard and the implementation is young — those are different statements, and only the first is reassuring.
Hashrate is concentrated
Few nodes, few miners. Decentralization is a measurement, not an intention, and by that measurement the network is currently centralized.
Mainnet beta
Live, persistent, and still being stabilized. Difficulty and rewards are still being tuned. Mine at your own discretion; rewards are not guaranteed.
No hardware wallet support
Ledger, Trezor and MetaMask cannot sign for this chain — they speak secp256k1 and the base is ML-DSA ‖ Falcon. Post-quantum hardware signing is research-grade today.
Not a security product
Proof-of-work is a work function, not a security claim. Real security here is cumulative SHA-256d work — hashrate multiplied by time — and there has not yet been much of either.