SHA
Initializing Silicon Layer
SHA • LIVE • ARBITRUM SEPOLIA

SILICON IDENTITY ON-CHAIN

ESP32-S3 eFuse gates anchored to Arbitrum Stylus. Four cryptographic proofs from silicon to chain — unforgeable hardware identity for the decentralized stack.

$25K Arbitrum Grant
4 Crypto Gates
12.6K Gas / Receipt
10K+ Test Vectors

THE FOUR GATES

Every device identity passes through four sequential cryptographic verification stages. All must succeed. One failure collapses the chain.

01
eFUSE BURN

Extracts manufacturer-burned identifiers from ESP32-S3 silicon — Base MAC address plus Chip Model ID. These values are physically immutable, fused into the die at factory. No firmware can alter them.

SILICON LAYER
02
HASH SIGN

Generates a 32-byte Hardware Identity (HW_ID) via on-device Keccak-256 using Ethereum-compatible 0x01 padding. Deterministic and reproducible — same silicon always produces the same digest.

CRYPTO LAYER
03
ATTEST

Stylus Rust contract reconstructs receipt digests, enforces monotonic counter replay protection, and validates approved firmware hash gating. Execution is restricted to whitelisted firmware versions.

VERIFICATION LAYER
04
ANCHOR

Verified identity anchored to Arbitrum Sepolia via Stylus WASM execution. One physical device maps to one on-chain identity. The contract address is public, immutable, and verifiable by anyone.

ARBITRUM STYLUS

THE SILICON PROBLEM

"Every DePIN node claims to be real hardware.
Most are software lying."

Decentralized physical infrastructure networks (DePIN) require proof that nodes are genuine hardware — not software simulations, VMs, or spoofed identities. Without silicon-level verification, any DePIN network can be gamed by attackers running software impersonations of physical nodes. SHA solves this at the identity root.

By binding immutable ESP32-S3 eFuse values — written once in the factory, physically unalterable — to Arbitrum Stylus smart contracts via Keccak-256 cryptographic proofs, SHA creates unforgeable device identity. The chain of trust runs from silicon atoms to on-chain bytes. No software layer can forge it.

TECHNICAL ARCHITECTURE

Three-layer stack. Silicon feeds cryptographic identity upward through verification to permanent on-chain state.

sha_anchor.rs — Stylus Interface
// SHA Stylus Contract — Arbitrum Sepolia
// Contract: 0xD661a1aB8CEFaaCd78F4B968670C3bC438415615

#[stylus_sdk::external]
impl StylusHardwareAnchor {
/// Verify single device receipt
pub fn verify_receipt(
  &self,
  hw_id: B256, // eFuse digest
  exec_hash: B256, // execution hash
  fw_hash: B256, // firmware hash
  counter: u64, // monotonic counter
  receipt: B256, // receipt digest
) -> Result<bool, Vec<u8>> {
  // Verify hw_id on allowlist
  // Enforce monotonic counter
  // Validate firmware hash gate
  // Reconstruct & compare digest
}


/// Batch verification — WASM amortization
pub fn verify_receipts_batch(
  &self,
  receipts: Bytes, // packed receipt blob
) -> Result<B256, Vec<u8>> {
  // Batch N=50: ~12.6k gas/receipt
  // Returns bitset of pass/fail results
}

}
01
SILICON LAYER
ESP32-S3 firmware extracts Base MAC + Chip Model from eFuse block. On-device Keccak-256 (0x01 Ethereum padding) produces the 32-byte HW_ID. Values are physically immutable — burned into silicon at manufacture.
ESP32-S3 eFUSE Keccak-256
02
VERIFICATION LAYER
Stylus Rust/WASM contract on Arbitrum Sepolia. Reconstructs receipt digests, enforces monotonic counter replay protection, validates firmware hash gating. Gas: 12.5k–29.7k per receipt (batch amortized). Deterministic on-chain execution.
Rust / WASM Arbitrum Stylus Replay Protection
03
MIDDLEWARE LAYER
Python SDK (Early Access) handles device authorization flows, receipt generation utilities, and on-chain submission helpers. Async interface with configurable RPC. Target: published to PyPI in Milestone 2.
Python SDK anchor-verifier PyPI

GAS BENCHMARKS

Reproducible benchmark results from Arbitrum Sepolia. Network: chain-id 421614. Contract verified and activated on-chain.

Operation Gas Used Gas / Receipt Status
verifyReceiptsBatch N=5 148,741 29,748 PASS
verifyReceiptsBatch N=10 202,090 20,209 PASS
verifyReceiptsBatch N=20 308,387 15,419 PASS
verifyReceiptsBatch N=50 628,201 12,564 PASS
verifyReceipt (single, success) 118,935 118,935 PASS
verifyReceipt (invalid digest) 98,631 98,631 REVERT (expected)
authorizeNode 99,288 PASS
approveFirmware 99,285 PASS
12.6K
Min gas / receipt (N=50)
3.75M
Deploy tx gas used
10K+
Deterministic test vectors
1M+
Fuzz execution cycles (target)

Interpretation: Stylus WASM batch execution shows strong amortization — gas per receipt drops sharply from 29.7k at N=5 to 12.6k at N=50, demonstrating the advantage of running native-compiled logic in WASM versus per-transaction Solidity dispatch. Batch verification is recommended for DePIN networks verifying many devices per transaction. Deploy TX: 0x1a9eaa…489 ↗

Arbitrum Foundation

$25,000
ARBITRUM STYLUS SPRINT GRANT

SHA is funded by the Arbitrum Stylus Sprint — a $25,000 USD grant awarded for Phase 1 development over 6 months on Arbitrum Sepolia (testnet only). The grant covers internal security hardening, reproducible validation artifacts, and developer SDK delivery. No mainnet deployment is included in Phase 1 scope.

Milestone 1 — Security Hardening
Coverage-guided fuzz testing (≥1M executions). Cryptographic parity: ≥10,000 device-contract test vectors. Monotonic counter enforcement. Firmware hash gating. Threat model documentation.
Milestone 2 — Developer SDK
Python SDK (anchor-verifier) to PyPI. Rust crate (stylus-hardware-primitives) to crates.io. Three reference integration templates deployable on Sepolia. Minimal developer dashboard with gas analytics.

SHA x VLAYER ZKP

Branch feat/zkp-vlayer-integration adds a fourth security layer: ZK execution correctness. Additive to SHA v1 — preserves all existing guarantees.

SHA x vlayer adds cryptographic execution correctness to hardware identity verification. This creates a 4-layer security model. Phase 1 architecture and interface design are complete. The vlayer Noir circuit and Stylus verifier are Phase 2.

Layer 01
Silicon Identity
eFuse → Keccak → on-chain allowlist
Live on Sepolia
Layer 02
Firmware Governance
Approved firmware hash gating. Execution restricted to known-good firmware versions.
Live on Sepolia
Layer 03
Replay Protection
Monotonic counter enforcement. Prevents receipt reuse across transactions.
Live on Sepolia
Layer 04
ZK Execution Proof
vlayer Noir circuit + Stylus verifier. Off-chain prover (ESP32 too constrained for ZK generation).
Phase 2

The protocol is open.
The silicon is real.

SHA is fully open-source and reproducible. Contract deployed, activated, and benchmarked on Arbitrum Sepolia. Clone the repo, run the test vectors, verify the deployment yourself.

Contract: 0xD661a1aB8CEFaaCd78F4B968670C3bC438415615