brave-core/docs/cryptography.md

Brave Browser Cryptographic Features

This document captures those cryptographic features in the Brave browser that are beyond the standard encryption available in every Chromium-based browser.

Feature	Cryptography	Platform	Notes	Open Source
Brave Accounts	RFC 9807	all	Similar to what's been available in Firefox for 20+ years	Yes
Brave Premium	Based on PrivacyPass (RFC 9576)	all	To validate credentials	Yes
Brave Rewards	VOPRF (RFC9497)		Anonymous rewards and anonymous access to Premium Services	Yes
Brave Leo NEAR Integration	HPKE for OHTTP (RFC9458)		Establish secure channel to inference	Yes
Brave Wallet ZEC chain	RedPallas Signature scheme. ZkSNARKs system for zero-knowledge proofs	TBD (Desktop at least)	Follows Orchard Shielded Protocol which uses RedPallas	Yes
Brave Wallet	ECDSA w/ curve Secp256k1 (koblitz curve not required in TLS)	all	Signing transactions for Ethereum, Bitcoin, Filecoin, and ZCash public transactions. ECDSA is used in chromium but for TLS and we're just signing different messages	Yes
Brave Wallet	EdDSA w/ curve Ed25519 (RFC8032)	all	Signing transactions for SOL, ADA. The cryptography here is used in chromium, we're just signing different messages	Yes
Brave Wallet	Sr25519 (Schnorr Signatures w/ Ristretto255 curve, Ed25519 under-the-hood)	Not released	Signing for DOT. Not released yet, but incoming for polkadot feature	Yes
Brave Wallet	BLS12-381	all	Only used if a user imports a filecoin account. We don't generate keys for this signature scheme by default	Yes
Brave Wallet	PBKDF2 (RFC2898)	all	Derive password into an encryption key for the wallet	Yes
Brave P3A	PPOPRF (puncturable partially oblivious pseudorandom function) and Shamir Secret Sharing for STAR protocol	all	Privacy-preserving telemetry that provides K-anonymity to Brave clients via STAR	Yes