Cryptographic Operations
Builder Vault TSM Cryptographic Operations
The Builder Vault TSM supports the following cryptographic signing operations:
| Operation | Parameters |
|---|---|
| ECDSA | secp256k1 |
| ECDSA | P-224 |
| ECDSA | P-256 |
| ECDSA | P-384 |
| ECDSA | P-521 |
| ECDSA / Starknet | StarkCurve |
| ECKCDSA / Ed25519 | |
| Schnorr / Ed25519 (EdDSA) | Edwards25519 |
| Schnorr / Ed448 (EdDSA) | Edwards448 |
| Schnorr / BIP340 ("Taproot") | secp256k1 |
| Schnorr / Mina | PallasMina |
| Schnorr / Zilliqa | secp256k1 |
| Schnorr / sr25519 | ristretto255 |
| BLS / Basic / Min Signature Size | BLS12-381 |
| BLS / Basic / Min Public Key Size | BLS12-381 |
| BLS / Aug / Min Signature Size | BLS12-381 |
| BLS / Aug / Min Public Key Size | BLS12-381 |
| BLS / PoP / Min Signature Size | BLS12-381 |
| BLS / PoP / Min Public Key Size | BLS12-381 |
| Aleo / Edwards377 | |
| RSA PKCS#1v1.5 | 2048, 3072, 4096 bit keys |
| RSA PSS | 2048, 3072, 4096 bit keys |
In addition, the Builder Vault also supports other cryptographic operations:
| Primitive | Parameters | Operations |
|---|---|---|
| AES-CTR | Key size 128, 192, 256 | Keystream |
| AES-CBC | Key size 128, 192, 256 | Encrypt, Decrypt |
| AES-GCM | Key size 128, 192, 256 | Encrypt, Decrypt |
| AES-CMAC | Key size 128 | Digest |
| HMAC-SHA2-256 | Key size 1-256 bytes | Digest |
| HMAC-SHA2-512 | Key size 1-256 bytes | Digest |
| RSA OAEP | Key size 2048, 3072, 4096 | Encrypt, Decrypt |
| RSA x.509 (raw) | Key size 2048, 3072, 4096 | Encrypt, Sign |
| ECDH | Curves: P-224, P-256, P-384, P-521, | Key agreement |
| secp256k1, ED-25519 (X25519) | ||
| RFC 5649 | Key size 128 | AES Key Wrap with Padding |
| AN10922 | Key size 128 | Symmetric Key Derivation |
MPC Protocols
Blockdaemon Builder Vault MPC solutions are based on public research, which includes protocols from various research papers:
- [DJNP+18] Ivan Damgård, Thomas Pelle Jakobsen, Jesper Buus Nielsen, Jakob Illeborg Pagter, Michael Bæksvang Østergård: Fast Threshold ECDSA with Honest Majority. SCN 2020: 382-400
- [DKLs19] Jack Doerner, Yashvanth Kondi, Eysa Lee, Abhi shelat: Threshold ECDSA from ECDSA Assumptions: The Multiparty Case. IEEE Symposium on Security and Privacy 2019: 1051-1066
- [DKLs23] Jack Doerner, Yashvanth Kondi, Eysa Lee, Abhi shelat: Threshold ECDSA in Three Rounds. SP 2024: 3053-3071
- [MRZ15] Payman Mohassel, Mike Rosulek, Ye Zhang: Fast and Secure Three-party Computation: The Garbled Circuit Approach. CCS 2015: 591-602
- [YWZ20] Kang Yang, Xiao Wang, Jiang Zhang: More Efficient MPC from Improved Triple Generation and Authenticated Garbling. CCS 2020: 1627-1646
- [BLS01] Dan Boneh, Ben Lynn, and Hovav Shacham. 2001. Short signatures from the Weil pairing. In International conference on the theory and application of cryptology and information security. Springer, 514--532.
Internet standards/drafts/RFCs:
Additional Features
In addition to the cryptographic operations, Builder Vault has several features:
- Authentication using API keys, mTLS, OIDC
- Key Derivation (BIP32)
- Presignatures (non-interactive online signing)
- Key Lifecycle Management (key resharing, key deletion)
- Key Import/Export
- Key Share Backup
- Emergency Recovery Service
- Dynamic Node Configuration (MPC node multi-tenancy)
Updated 4 months ago