Aura FHE is the encrypted compute layer for the Solana Virtual Machine. It runs Solana programs on data that stays sealed end-to-end using a novel LUT-FHE scheme over Multivariate Quadratic structure. The protocol delivers privacy as a mathematical guarantee — not a policy, access control, or trusted enclave.

What is Fully Homomorphic Encryption (FHE)?

Fully Homomorphic Encryption (FHE) is a form of encryption that allows computations to be performed directly on encrypted data without decrypting it first. The result of the computation remains encrypted and can only be opened by the data owner. This enables truly privacy-preserving computation where sensitive data is never exposed — not at rest, not in transit, and not during processing.

How is Aura FHE different from zero-knowledge proofs?

Zero-knowledge proofs (ZK) prove that a computation happened correctly without revealing the underlying inputs. Aura FHE performs the computation directly on encrypted data and returns an encrypted result. ZK verifies correctness; FHE enables private computation. They solve different problems and are often complementary — every Aura coprocessor output ships with a cryptographic correctness proof that validators verify without decrypting.

How fast is Aura FHE compared to other FHE solutions?

Aura FHE delivers approximately 1000× speedup over TFHE-based alternatives across typical arithmetic workloads. Integer addition executes in roughly 0.04 microseconds, compared with Zama's ~50ms gate evaluation. Verification time is approximately 0.1 seconds. The architecture is bootstrap-free — the scheme is structurally noise-free, so it never needs the expensive ciphertext refresh that defines other production FHE schemes. Independent benchmark verification is in progress.

Does Aura FHE require a new blockchain?

No. Aura FHE operates as a coprocessor and integrates with existing chains at the SDK and wallet level. A Solana program submits an encrypted compute request to the Aura coprocessor network, receives a verifiable ciphertext result, and proceeds with on-chain settlement. The architecture is chain-agnostic by design; Aura ships first on Solana, with cross-chain expansion planned from Q1 2027.

Can Aura FHE support enterprise use cases?

Yes. The same coprocessor that serves a Solana DEX can serve a hospital, hedge fund, government agency, or AI inference pipeline. The cryptography does not care whether a request originates from a smart contract or a REST API. This makes Aura suitable for regulated, compliance-sensitive environments — financial services, healthcare AI, legal applications, defense, and any enterprise requiring privacy-preserving computation.

Is Aura FHE quantum-resistant?

Yes. Security reduces to the Multivariate Quadratic (MQ) problem, proven NP-hard by Garey and Johnson in 1979. Unlike lattice-based FHE schemes whose hardness rests on conjectured assumptions about Learning With Errors (LWE), MQ-hardness has a stronger theoretical foundation and no known efficient quantum attack. Post-quantum security is a structural property of the scheme, not a future upgrade path.

What can Aura FHE be used for?

Aura FHE unlocks application categories that are impossible on transparent blockchains: sealed-bid prediction markets (AuraPoly is live and clearing real flow), encrypted DEXes and dark pools, confidential AI inference on medical, legal, and financial data, private real-world asset tokenization, encrypted DAO governance with sealed voting, and autonomous AI agents with private wallets and encrypted memory. More than $100 trillion in institutional capital is currently blocked from on-chain markets because state is fully visible — Aura is the encryption layer that removes that ceiling.

What is the AURA token used for?

AURA is the unit of account for every encrypted computation processed by the network. It has four primary utilities: (1) per-transaction compute fees for FHE workloads called through the SDK, (2) staking by coprocessor miners and validators, (3) wallet balances held by end users to pay for their own encrypted operations, and (4) governance over protocol parameters. Total supply is fixed at 1,000,000,000 AURA with no protocol-level inflation beyond the published mining emission schedule.

When will Aura FHE launch?

AURA SDK v5 is already in production, and AuraPoly is clearing real flow on the encrypted compute layer today. The Token Generation Event (TGE) is targeted for Q3 2026, coordinated with the AuraPoly token integration and broader dApp launches. The Proof of Encrypted Work mining protocol launches publicly in Q4 2026 with genesis emissions beginning against real workload mix. Chain-agnostic expansion onto a second chain begins Q1 2027. Each milestone is a demoable, announceable event rather than a promise.

How does Aura FHE compare to Zama?

Zama has established itself as Ethereum's encryption layer, validated by $130M+ raised and ERC-7984 ratification. Aura FHE targets Solana, where Zama's CPU-based approach (20+ TPS, GPU acceleration targeting 'hundreds of TPS per chain' by Q3 2026) cannot match Solana's 400ms block time. Aura's bootstrap-free LUT-FHE is fundamentally different mathematics designed for chain-speed finance — integer addition in ~0.04μs versus Zama's ~50ms gate evaluation, with a 3.7MB WASM runtime. The two protocols are optimized for different chain regimes rather than directly competing.

What makes Aura FHE's technology different?

Aura FHE's core innovation is LUT-FHE — a fully homomorphic encryption scheme built on precomputed lookup tables defined over Multivariate Quadratic structure rather than ring-based ciphertext arithmetic. Two structural advantages follow. First, the scheme is bootstrap-free: the algebraic structure does not accumulate noise, so there is no need for the expensive ciphertext refresh that bottlenecks every lattice-based FHE scheme. Second, security reduces to MQ-hardness, proven NP-hard and post-quantum secure. The construction is the product of more than 12 years of cryptographic research and is protected by 9 patents.

Why Solana Needs FHE (And Why FHE Needs Solana)

Solana moves 65,000 transactions per second with 400-millisecond block times. It has the throughput, the finality speed, and the DeFi ecosystem density to be the dominant chain for financial applications.

It has one structural weakness that is holding it back from institutional adoption: every transaction is a postcard. Everyone can read it.

The $1.5 Billion Leak

In 2025, MEV bots extracted over $1.5 billion from DeFi users across chains. Solana's share of that extraction is growing faster than any other ecosystem, because Solana's speed actually makes certain forms of MEV more profitable — sandwich attacks execute in sub-second windows, making the capital efficiency of the attack extremely high.

Jito bundles have brought MEV into the open on Solana. Validators can auction off transaction ordering. Bots bid for the right to front-run your trade. It is not a bug. It is the system working as designed, because the system was designed with all-public state.

Why Privacy Layers Have Not Fixed This

Confidential Transfers (SPL Token Extension): Encrypts token balances and transfer amounts using ElGamal encryption. Meaningful progress, but only covers transfer amounts. MEV bots do not need your exact balance; they need your trade direction and size.

ZK Compression: Reduces on-chain data storage through zero-knowledge proofs, but proves data correctness, not data privacy.

Private mempools / block builders: Delay visibility of transactions. Helpful, but the data is still plaintext once revealed.

None of these approaches encrypt the computation itself.

What FHE Actually Gives Solana

Your swap instruction is encrypted. The input token, output token, amount, and slippage parameters are ciphertexts.
The AMM computation runs on encrypted inputs. Price calculation, fee deduction, slippage check — all performed on ciphertext.
Threshold decryption reveals the result only to you. A 3-of-5 validator threshold network produces partial decryption shares.

MEV bots see encrypted bytes in the mempool. Sandwich attacks become mathematically impossible — there is nothing to sandwich.

Why FHE Needs Solana

High throughput: Solana's parallel execution via Sealevel and raw TPS capacity provide the headroom FHE needs.

Low block times: Solana's 400ms slots mean total FHE latency stays under 3 seconds — acceptable for users.

Affordable data availability: FHE ciphertexts are large (~4KB per value). Ethereum calldata costs would be prohibitive. Solana's account model makes this economically viable.

Developer ecosystem: Solana has the fastest-growing developer ecosystem in crypto, with teams culturally inclined toward new infrastructure.

The Architecture: Coprocessor Model

User encrypts data locally (FHE public key)
        |
        v
Solana transaction with encrypted instruction data
        |
        v
Aura coprocessor receives ciphertext
        |
        v
Homomorphic computation (add, multiply, compare)
        |
        v
Encrypted result posted back to Solana
        |
        v
Threshold decryption (3-of-5 validators)
        |
        v
User decrypts with local secret key

What This Enables for Solana DeFi

For DEXs (Jupiter, Raydium, Orca): Encrypt order flow before it hits the AMM. Eliminate sandwich MEV.

For lending protocols (Kamino, Marginfi): Hide position sizes and collateral ratios. Prevent liquidation sniping.

For governance (Realms): Encrypted votes tallied homomorphically and revealed only after voting period ends.

For NFT markets (Tensor, Magic Eden): Sealed-bid auctions where bids are encrypted until auction closes.

The Timeline

April 7, 2026: SDK announcement + litepaper
April 24: Alpha program opens (10 builder spots)
May 6-7: Public beta
Q3 2026: Mainnet

Solana was built for speed. Aura adds privacy. Together, they are the first blockchain stack that gives you both.

Join the builder waitlist at afhe.io/sdk. Follow at @AfheLabs. Come to discord.gg/aurafhe.