'/%3E%3C/svg%3E){kind=small}
'/%3E%3Cpath%20fill='%23b2b2b2'%20d='M241%20382q0%2016%2017%2026%2017%2011%2042%2011t42-11q16-11%2017-26V269H241'/%3E%3Cpath%20fill='%239f7e00'%20d='M241%20379q0%2014%208%2023%209%209%2021%209%2014%200%2021-9%209-9%209-23V269h-59'/%3E%3Cpath%20d='M241%20339v-70h59v110q0%2014-9%2023l-6%205v-68h-15v72q-8%200-14-4v-68zm59%2040c0%2022%2015%2032%2029%2032%2021%200%2030-18%2030-32v-40h-59'/%3E%3Cpath%20fill='%239f7e00'%20d='M266%20277v5h2v12h-3v-5h2v-5h-9v5h2v5h-4v9h3v18h-5v10h34v-10h-5v-18h3v-9h-4v-5h2v-5h-9v5h2v5h-3v-12h2v-5zm42%20101q0%2010%206%2017%206%206%2015%207%2010-1%2016-7%206-7%206-17v-29h-43'/%3E%3Ccircle%20fill='%230044ad'%20cx='329.5'%20cy='372'%20r='6'/%3E%3Cellipse%20fill='%230044ad'%20cx='300'%20cy='340'%20rx='16'%20ry='21'/%3E%3C/svg%3E){kind=small}
Unique Secrets Vault Technology
Reinventing the human factor for post-quantum security
Turn memorable images into a human-controlled factor for post-quantum security, recreating private keys locally only when needed instead of keeping them persistently stored.
Research and technical collaboration
Why image-derived keys change the security model
Secrets Vault changes how cryptographic credentials are created and protected by deriving keys locally from ordinary images only when they are needed.
Keys derived,not stored
Cryptographic keys are recreated on demand rather than stored, reducing exposure if a device or system is compromised.
Ordinary images,strong cryptography
Familiar images become inputs to cryptographic operations without being modified or containing hidden information.
One foundation, multiple applications
Applied today to authentication and data protection, with potential across broader cryptographic applications.
Crypto-agileby design
We can derive keys for classical, post-quantum, or hybrid schemes, adapting algorithms as standards and requirements evolve.
The process behind Secrets Vault
Secrets Vault combines computer vision and cryptography to derive post-quantum keys from ordinary images, called Keepics.
1. The user selects an ordinary image
The image remains unchanged throughout the process and is never modified or marked.
2. Extract invariant visual information
Computer vision extracts unique and invariant information locally on the user’s device.
3. Derive a context specific key
The extracted information is used to derive a unique post-quantum key for each specific operation.
4. Use the key on demand
The key exists only for the required cryptographic operation and is not persistently stored.
From core technology to real solutions
Secrets Vault technology powers identity, data protection, and post-quantum security solutions.
Secrets Vault Identity
Image-based passwordless, MFA, account recovery, and identity assurance across devices and existing IAM environments.
Secrets Vault Data
Post-quantum protection, sharing and recovery for sensitive information, without stored keys.
Post-quantum readiness services
Cryptographic risk assessment and a practical roadmap to quantum-resistant security.
Security features
On-device cryptographic operations
Keys are derived and used locally. Secret key material never leaves the device; only the required cryptographic output does.
Ephemeralcontext-specific keys
Keys can differ by user, service, or operation, being generated on demand and never persistently stored.
Crypto-agilearchitecture
Cryptographic algorithms can evolve without changing the underlying image-based key generation method.
Zero-knowledgeverification
The system verifies the correct Keepic without revealing the image itself during the verification process.
Multi-factorsecurity
Keepics can be combined with a PIN, pattern or local facial verification to generate keys with an additional layer of security.
Protocolcompatibility
Image-derived keys can support authentication, encryption, digital signatures, secret sharing, and other cryptographic protocols.
System security strength
Secrets Vault uses cryptographic algorithms aligned with NIST post-quantum standards to protectdata and authentication against current and future quantum threats.
AES-256
Symmetric encryption (FIPS 197)
ML-KEM-1024
Key encapsulation (FIPS 203)
ML-DSA-87
Digital signatures & authentication (FIPS 204)
Modular architecture
Additional standardized or emerging algorithms, including SLH-DSA, FN-DSA, and HQC, can be integrated without changing the image-based key derivation method.
Existing infrastructure compatibility
The technology can also operate with NIST-compliant algorithms such as RSA, ECDSA and EdDSA, supporting integration with existing infrastructures.
Additional technology layers
Edge biometric authentication without biometric storage
Facial matching and liveness run locally for the session. No biometric data or templates are retained on the device or transmitted, while authentication is completed through post-quantum cryptographic proof.
High-assurance identity with trusted NFC credentials
Read issuer-signed data and the official image from supported NFC identity documents or badges for identity assurance or post-quantum authentication, with optional local holder verification.
Research & innovation
Secrets Vault develops its technology through proprietary research and collaboration with academic and technical experts.
Jordi Puiggalí — Co-Founder & CTO
Cryptography and cybersecurity expert with extensive experience in academic research and secure technology development.
Explore what Secrets Vault technology can do
Discover how our technology can support identity, data protection and post-quantum readiness.
Technology FAQs
Calyptography is Secrets Vault’s proprietary method for deriving cryptographic keys from the visual characteristics of ordinary images, locally and on demand, without modifying the image or persistently storing private keys.
Computer vision extracts stable visual characteristics from the image locally. Calyptography uses this information and the relevant user, service, and operation context to derive cryptographic key material.
No. The Keepic remains under the user’s control. Private keys are recreated locally only when needed and are never persistently stored. Connected services register only the public key or verification data.
Calyptography is designed to recover the same key after supported transformations such as resizing or compression. Changes outside the supported tolerance may prevent successful key derivation.
Secrets Vault supports AES-256, ML-KEM-1024, and ML-DSA-87, together with selected classical algorithms for compatibility. Its modular architecture can support classical, post-quantum, and hybrid schemes.
No. Steganography hides information inside an image. Calyptography does not modify the pixels, metadata, or file structure. It derives cryptographic material from the image’s visual characteristics.
Yes. Context-specific derivation can generate separate keys for different users, services, or operations, avoiding reuse of the same private key across contexts.
Not necessarily. Depending on policy, Secrets Vault can combine the Keepic with a PIN, pattern, or local facial verification before deriving the cryptographic key.
