# Builder Vault TSM Cryptographic Operations

The Builder Vault TSM supports the following cryptographic signing operations:

| Operation                        | Parameters                     |
|----------------------------------|--------------------------------|
| ECDSA                            | secp256k1                     |
| ECDSA                            | P-224                          |
| ECDSA                            | P-256                          |
| ECDSA                            | P-384                          |
| ECDSA                            | P-521                          |
| ECDSA / Starknet                | StarkCurve                     |
| ECKCDSA / Ed25519               |                                |
| Schnorr / Ed25519 (EdDSA)       | Edwards25519                   |
| Schnorr / Ed448 (EdDSA)         | Edwards448                     |
| Schnorr / BIP340 ("Taproot")   | secp256k1                     |
| Schnorr / Mina                   | PallasMina                     |
| Schnorr / Zilliqa                | secp256k1                     |
| Schnorr / sr25519                | ristretto255                   |
| BLS / Basic / Min Signature Size  | BLS12-381                     |
| BLS / Basic / Min Public Key Size | BLS12-381                     |
| BLS / Aug / Min Signature Size   | BLS12-381                     |
| BLS / Aug / Min Public Key Size  | BLS12-381                     |
| BLS / PoP / Min Signature Size   | BLS12-381                     |
| BLS / PoP / Min Public Key Size  | BLS12-381                     |
| Aleo / Edwards377                |                                |
| RSA PKCS#1v1.5                  | 2048, 3072, 4096 bit keys     |
| RSA PSS                          | 2048, 3072, 4096 bit keys     |

In addition, the Builder Vault also supports other cryptographic operations:

| Primitive          | Parameters                               | Operations            |
|--------------------|------------------------------------------|-----------------------|
| AES-CTR            | Key size 128, 192, 256                  | Keystream             |
| AES-CBC            | Key size 128, 192, 256                  | Encrypt, Decrypt      |
| AES-GCM            | Key size 128, 192, 256                  | Encrypt, Decrypt      |
| AES-CMAC           | Key size 128                              | Digest                |
| HMAC-SHA2-256     | Key size 1-256 bytes                     | Digest                |
| HMAC-SHA2-512     | Key size 1-256 bytes                     | Digest                |
| RSA OAEP           | Key size 2048, 3072, 4096                | Encrypt, Decrypt      |
| RSA x.509 (raw)   | Key size 2048, 3072, 4096                | Encrypt, Sign         |
| ECDH               | Curves: P-224, P-256, P-384, P-521,     | Key agreement          |
|                    | secp256k1, ED-25519 (X25519)            |                       |
| RFC 5649          | Key size 128                              | AES Key Wrap with Padding |
| AN10922            | Key size 128                              | Symmetric Key Derivation |

# MPC Protocols

Blockdaemon Builder Vault MPC solutions are based on public research, which includes protocols from various research papers:

- [DJNP+18] Ivan Damgård, Thomas Pelle Jakobsen, Jesper Buus Nielsen, Jakob Illeborg Pagter, Michael Bæksvang Østergård: _Fast Threshold ECDSA with Honest Majority_. SCN 2020: 382-400
- [DKLs19] Jack Doerner, Yashvanth Kondi, Eysa Lee, Abhi shelat: _Threshold ECDSA from ECDSA Assumptions: The Multiparty Case_. IEEE Symposium on Security and Privacy 2019: 1051-1066
- [DKLs23] Jack Doerner, Yashvanth Kondi, Eysa Lee, Abhi shelat: _Threshold ECDSA in Three Rounds_. SP 2024: 3053-3071
- [MRZ15] Payman Mohassel, Mike Rosulek, Ye Zhang: _Fast and Secure Three-party Computation: The Garbled Circuit Approach_. CCS 2015: 591-602
- [YWZ20] Kang Yang, Xiao Wang, Jiang Zhang: _More Efficient MPC from Improved Triple Generation and Authenticated Garbling_. CCS 2020: 1627-1646
- [BLS01] Dan Boneh, Ben Lynn, and Hovav Shacham. 2001. Short signatures from the Weil pairing. In International conference on the theory and application of cryptology and information security. Springer, 514--532.

Internet standards/drafts/RFCs:

- BLS: [https://datatracker.ietf.org/doc/draft-irtf-cfrg-bls-signature/](https://datatracker.ietf.org/doc/draft-irtf-cfrg-bls-signature/)

# Additional Features

In addition to the cryptographic operations, Builder Vault has several features:

- [Authentication using API keys, mTLS, OIDC](https://builder-vault-tsm.docs.blockdaemon.com/docs/sdk-authentication)
- [Key Derivation (BIP32)](https://builder-vault-tsm.docs.blockdaemon.com/docs/key-derivation)
- [Presignatures (non-interactive online signing)](https://builder-vault-tsm.docs.blockdaemon.com/docs/presignatures)
- [Key Lifecycle Management (key resharing, key deletion)](https://builder-vault-tsm.docs.blockdaemon.com/docs/key-lifecycle-management)
- [Key Import/Export](https://builder-vault-tsm.docs.blockdaemon.com/docs/key-import-and-export)
- [Key Share Backup](https://builder-vault-tsm.docs.blockdaemon.com/docs/sdk-key-share-import-export#backup)
- [Emergency Recovery Service](https://builder-vault-tsm.docs.blockdaemon.com/docs/emergency-recovery#the-emergency-backup-and-recovery-process)
- [Dynamic Node Configuration (MPC node multi-tenancy)](https://builder-vault-tsm.docs.blockdaemon.com/docs/dynamic-node-configuration)

Updated 4 months ago

### What’s Next

- [Getting Started (Demo TSM)](https://builder-vault-tsm.docs.blockdaemon.com/docs/getting-started-demo-tsm)