Author: Alex Liu, Foresight News
As the Web3 ecosystem continues to mature, issues such as privacy protection, access control, and key management are becoming increasingly prominent. On April 5, Mysten Labs launched a new decentralized key management solution, SEAL, on Sui Testnet. Below, we will introduce SEAL in detail from multiple dimensions, including technical architecture, application scenarios, developer experience, and future prospects.
In the traditional Web2 era, data encryption and access control often rely on centralized key management services (KMS), such as AWS KMS or GCP Cloud KMS. However, these solutions cannot meet the Web3 ecosystem's requirements for decentralization, transparency, and user autonomy.
To address this pain point, Mysten Labs launched SEAL, which aims to achieve secure encryption and access control of data in a decentralized manner, helping developers avoid relying on a single trusted party when building decentralized applications (DApps), thereby achieving more flexible and secure data protection.
The emergence of SEAL solves the limitations of traditional solutions that often require protection of massive amounts of on-chain data due to single scenarios or reliance on centralized services. With SEAL, developers can achieve data encryption and access management across storage systems and application scenarios without sacrificing security and performance, providing a general and efficient security solution for Web3 applications.
SEAL uses a multi-layered technical solution to ensure the data encryption process is secure and efficient, mainly including the following key components:
SEAL uses the Move smart contract on the Sui blockchain to implement access control. Developers can define access policies in smart contracts to fine-tune who can access the decryption key and under what conditions. This chain-based rule ensures transparency and makes the permission verification process tamper-proof, thereby enhancing data security.
In the traditional single-point trust key management method, centralized key storage is easily targeted. SEAL uses threshold encryption technology to store decryption keys in multiple independent backend services. The complete key can only be recovered when the preset minimum number of keys is reached (such as the t-out-of-n model). This mechanism effectively disperses the risk, and the overall data can remain safe even if some key servers are attacked.
SEAL emphasizes that data is encrypted and decrypted on the client, that is, the user completes the encryption process locally. In this way, even if SEAL's server or intermediate node is hacked, the plaintext data cannot be obtained, further improving the privacy protection ability of the system.
Unlike some solutions that can only encrypt specific storage systems, SEAL is storage independent. Whether it is Walrus, a decentralized storage based on Sui chain, or other on-chain or off-chain storage systems, SEAL can provide compatible encryption solutions. This flexibility allows developers to choose the most suitable storage solution based on project requirements without worrying about the adaptation of the encryption mechanism.
SEAL's flexible and diverse application scenarios also demonstrate its extensive practical value. The following are several typical application cases:
In the current field of digital content distribution, more and more creators hope to achieve paid reading or membership subscriptions by encrypting content. With SEAL, creators can encrypt high-quality content and only allow users who hold specific NFTs or pay subscription fees to decrypt and view it. This model is similar to the on-chain version of Patreon or Substack, which not only protects the copyright of the content, but also realizes accurate user paid access.
In decentralized chat and social applications, user privacy protection is particularly important. SEAL supports end-to-end encrypted message transmission, which ensures that only the communicating parties can read the message content even on the public chain. Developers can use SEAL to build secure and reliable decentralized instant messaging applications to solve the hidden dangers of privacy leakage in traditional social platforms.
As an important asset on the blockchain, the security of NFT's transmission process has also attracted much attention. SEAL can be applied to the time-lock encryption of NFT, that is, the transfer or unlocking of NFT's ownership is set to be carried out within a specific time window. This method is not only applicable to closed auctions, but also provides technical support for DAO voting and other decisions.
In the fields of medical care and identity authentication, users' sensitive data needs to be strictly protected. SEAL can encrypt data stored in Walrus or other storage systems, and ensure that only authorized users can view it through on-chain access control, providing a decentralized and efficient solution for data privacy protection.
SEAL is technologically innovative and provides developers with a complete SDK and tool chain to reduce the difficulty of integration and deployment. Through the SEAL SDK, developers can call encryption, decryption, and key management interfaces without having to deeply understand the underlying complex cryptographic principles. At the same time, although there is no established ecological project at present, the official provides detailed documentation and a sample APP, the code of which provides developers with detailed guidance to help them quickly build and debug applications in the testnet environment.
In addition, the beta version of SEAL has been opened on Sui Testnet, where developers can conduct multiple scenario tests and submit feedback to Mysten Labs so that functions can be continuously improved in future versions. The developer-friendly and easy-to-integrate features make SEAL the preferred tool for Web3 developers.
Although SEAL currently has mature basic functions, Mysten Labs has not stopped there. In the future, SEAL's development direction may include:
Multi-party secure computation (MPC): By introducing MPC technology, more distributed decryption operations can be achieved, making the key management process more secure and reliable.
Server-side encryption: In certain specific scenarios, in order to meet the needs of lightweight front-end applications, server-side decryption solutions may be supported in the future to provide developers with more flexible options.
Digital rights management (DRM): Drawing on the experience of the traditional media industry, develop DRM technology similar to platforms such as Netflix and YouTube to protect the copyright of digital content while ensuring the security of the user end.
The addition of these functions will further expand the application boundaries of SEAL, making it not only limited to data encryption and decryption, but also a comprehensive decentralized data security platform, providing solid security protection for the entire Web3 ecosystem.
American filmmaker Carl Erik Rinsch was arrested after allegedly misusing $11 million meant for a Netflix-backed sci-fi series, spending the money on risky investments, cryptocurrency, and luxury purchases. He now faces serious fraud charges, with a potential sentence of up to 90 years if convicted.
JoySeoul prosecutors seek a 10-year sentence for a man who stabbed Haru Invest’s CEO in court. A fraud victim himself, he allegedly lost 100 BTC to the platform, which is accused of defrauding 16,000 investors of $960 million. Will the court show leniency or impose a harsh penalty?
KikyoA U.S. appeals court ruled that AI-generated art without human involvement cannot be copyrighted, upholding a previous decision against researcher Stephen Thaler. The court reinforced that copyright law requires human authorship, rejecting Thaler’s claim that his AI-created artwork deserved protection.
Weatherly2025 年 3 月 19 日 —— AB DAO 宣布正式与 Alpha Technology Group Limited（纳斯达克代码：ATGL）达成战略合作，双方将整合优势资源，共同推动人工智能（AI）与区块链技术在供应链、企业管理、物联网等领域的创新应用与落地。
AlexMarch 19, 2025 – AB DAO has officially announced a strategic partnership with Alpha Technology Group Limited (Nasdaq: ATGL). The two companies will integrate their respective strengths to drive the innovative application and adoption of artificial intelligence (AI) and blockchain technology across supply chain management, enterprise operations, and the Internet of Things (IoT).
AlexAn attacker exploited a security flaw in the AIXBT crypto bot’s dashboard, stealing 55.5 Ether, valued at $106,200. The bot’s team has since migrated servers, enhanced security, and reassured users that core systems were unaffected by the breach.
AnaisAs AI-powered nurses take on more roles in hospitals, human nurses worry about its impact on patient care and safety. Should healthcare embrace full automation, or is the human touch essential to delivering the best care?
CatherineAttackers used address poisoning on the EOS blockchain, sending tiny amounts of EOS to users to manipulate them into copying and pasting fake wallet addresses. This led to users mistakenly sending funds to fraudulent wallets, raising concerns about blockchain security.
WeatherlyVolatility Shares LLC is launching the first Solana futures ETFs: SOLZ for standard exposure and SOLT for leveraged exposure. As the market awaits the SEC’s decision on spot Solana ETFs, with a 75% approval chance by year-end, Solana’s price has surged over 8% in 24 hours. Will approval fuel further gains, or is rejection looming?
CatherinePresident Donald Trump will speak at the Digital Asset Summit in New York on 20 March, the first time a US president has addressed a crypto conference. His stance on regulation could have major market implications.
Kikyo