Skip to content

Commit 1691769

Browse files
committed
Docs: clarify HMAC search algorithms in architecture overview
1 parent 4a19b24 commit 1691769

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

README.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,8 +40,9 @@ Searchable encryption introduces inherent side channels. KryptoDB intentionally
4040
KryptoDB operates as an intermediary broker between LLM agents and the encrypted graph:
4141
1. **Agent** sends an MCP tool call (e.g. `query_memory_tool`) to the local MCP client.
4242
2. **MCP Client** forwards the request to the central **Daemon** via HTTPS with a bearer API key.
43-
3. **Daemon** computes HMAC indexes for the query and searches **Neo4j** (Search-before-decrypt).
44-
4. **Neo4j** returns candidate ciphertexts.
43+
3. **Daemon** computes HMAC indexes for the query terms and executes a **Search-before-decrypt** cypher query against **Neo4j**.
44+
*(Note: KryptoDB utilizes deterministic HMAC-based searchable encryption algorithms to perform exact-match and token-based lookups directly on ciphertext indexes without revealing the search query to the database.)*
45+
4. **Neo4j** returns candidate ciphertexts matching the cryptographic hashes.
4546
5. **Daemon** drops unauthorized candidates, decrypts the remainder using the active session scope key, and returns plaintext to the Agent.
4647

4748
![System Architecture](ui/public/structure.png)

0 commit comments

Comments
 (0)