Zero-Knowledge, from promise to proof.
The flagship module told you why. This one shows you how — and why, without a single equation, the promise holds mathematically. Just the right ideas, so you never have to take anyone's word for it again.
Why your financial data is worth so much
Your statements don't just say how much you earn. They reveal where you live, your health (a pharmacy, a specialist), your convictions (a donation, a subscription), your vulnerabilities (a recurring overdraft, a loan). No other data is as intimate as the trail your money leaves — and that is precisely why it sells so well.
The dominant model in finance apps is built on that gold: aggregate your accounts, build a profile, monetise it. Privacy there isn't a right but an obstacle to work around. Ozorys starts from the exact opposite: since this data is too precious to be exposed, it never will be — not even to us.
A banking history is enough to infer a state of health, an orientation, a family situation, a drop in income. Handing that to a third party who makes a living from it means handing over the most faithful portrait of your life.
From your code to an unbreakable key
It all starts with your secret code. Ozorys never stores it: it uses it to forge a key, by repeating a computation 600,000 times (that's PBKDF2 derivation). That number isn't decorative — it makes each guess so slow that brute-forcing your vault would become prohibitively expensive, even for purpose-built hardware.
Change a single character of your code, and the resulting key bears no relation to the previous one. That's the avalanche effect: no closeness, no trail. The demonstration below makes it visible — type a test code, then change one digit.
The AES-256-GCM seal
Once the key is forged, every piece of data — an amount, a category, a note — is sealed with AES-256-GCM, the standard used by governments and banks. “GCM” adds a signature: if a single byte of the encrypted block were altered, Ozorys would detect it and refuse to trust tampered data. The cipher protects confidentiality; the signature protects integrity.
What travels to the cloud to sync your devices is therefore only that sealed block — noise without the key. The flagship module showed you what it looks like: unreadable, and utterly different at the slightest change.
Encryption (AES-256): your data stays secret. Authentication (GCM): your data stays intact. Without your key it's impossible to read — and impossible to alter without being caught.
The proof is our powerlessness
Here's the decisive test of any “Zero-Knowledge” system: what happens if you lose your code? At Ozorys, the answer is brutal and reassuring at once — nobody, not even our team, can restore your data. If we could, it would mean we held a copy of your key; and if we held it, the promise would be a lie.
Our powerlessness is therefore the proof. It holds against a breach of our servers too (there'd be nothing there but noise) and against a legal demand (we cannot hand over what we don't have). The trade-off, you know it: keep the key. The next module devotes a whole safety net to it.
Let's check it stuck
Six questions, marked instantly. Your answers never leave this page.
1. Why is your financial data worth so much to a third party?
The trail your money leaves is the most intimate data there is — hence its value on the data market. Ozorys refuses to expose it.
2. What are the 600,000 iterations (PBKDF2) for?
A slow derivation makes brute force prohibitively expensive. The key is forged on your device, never transmitted.
3. You change a single character of your code. The resulting key…
The avalanche effect erases all closeness: no trail links two neighbouring keys.
4. What does the “GCM” in AES-256-GCM guarantee, on top of secrecy?
Two locks: AES encrypts (confidentiality), GCM signs (integrity). Impossible to read, impossible to alter without being caught.
5. What travels to the cloud for syncing is…
The server stores nothing but noise. Without the key — which we don't have — nothing is readable.
6. How is being unable to restore your data good news?
Being able to restore would imply a copy of the key — and therefore a lie. Our powerlessness is the proof that the system keeps its word.
Today's challenge
Open the demonstration above, forge a key with “1234”, then with “1235”. Watch two neighbouring keys become total strangers to one another. In one gesture, you hold the intuition that protects your entire vault.