mhtirogla
Home
Systems
API
Pricing
About
Log in
← Back
Home
›
Systems
›
Blockchain and web3
custody-wallet
HD / MPC custody wallet
Fireblocks
System
Techniques · 7
Primitives · 34
custody-wallet
Reorg safe chain indexing
finance · medium: Index blockchain events with confirmation depth, reorg rollback and finality tracking
Envelope encryption
security · medium: Encrypt each object with its own data key and wrap that key under a KMS-held key, so rotation re-wraps 60 bytes and deleting a key shreds data.
›
Hardware root of trust
security · medium: Secure elements/TPM/TEE holding device keys, attestation and monotonic counters
Hardware security module (HSM)
security · medium: A tamper-resistant device or service that generates keys, signs, decrypts and wraps with them internally, and releases a key only as ciphertext.
›
Tamper-evident audit log
security · medium: An append-only log whose Merkle root, signed per batch, lets anyone verify an entry is present and history was never rewritten, with log-size proofs.
›
Threshold ecdsa mpc
security · medium: Multi-party ECDSA signing (GG18/CMP-style) with presignatures and key refresh
Homomorphic encryption
security · medium: Additively homomorphic ElGamal/Paillier for encrypted tallies and private aggregation
Idempotency keys
finance · low: Client-chosen unique key per logical operation, stored with a request fingerprint and the final response, so retries replay the first result instead of acting twice.
›
Digital signatures (Ed25519)
security · low: Small, fast, deterministic public-key signatures that prove who produced a message; the default for tokens, releases and protocols.
›
ECDSA signatures
security · low: The elliptic-curve signature standardised in FIPS 186-5 (P-256) and used by secp256k1 ledgers; 64-byte signatures, but a repeated or biased nonce leaks the private key.
›
Shamir secret sharing (k-of-n)
security · low: Split a secret into n shares so any k reconstruct it and any k-1 reveal nothing at all, using a random polynomial over a finite field.
›
Checksummed address encoding
data-structures · low: Base58Check, Bech32 and EIP-55 address encodings with error-detecting checksums
Hierarchical deterministic keys
finance · low: BIP-32/39/44 seed phrases and child-key derivation paths for wallets
Authorization models (RBAC, ABAC, R…
security · low: How to decide who may do what to which object; roles for coarse rules, relationships for sharing, and checks on every object.
›
Elliptic curve arithmetic
security · low: Point addition, doubling and constant-time scalar multiplication in projective coordinates
HKDF key derivation (extract-and-ex…
security · low: HMAC-based two-step key derivation: extract a uniform pseudorandom key from any secret, then expand it into as many context-bound keys as you need.
›
Hierarchical state machine
systems · low: Nest states so a substate inherits its parent's reactions and only overrides what differs, with ordered entry and exit actions along the path.
›
Message sequence numbers
distributed · low: A per-stream counter on every message lets the receiver detect loss, duplicates and reordering, ack cheaply and resume after reconnect with "send from N".
›
Journaled state revert
storage · low: Undo journal of state writes enabling nested checkpoints and cheap revert
AEAD (AES-GCM, ChaCha20-Poly1305)
security · low: Authenticated encryption that encrypts and detects tampering in one call; the only kind of symmetric encryption you should use.
›
Aes key wrap
security · low: AES Key Wrap (RFC 3394/5649) and AES-GCM-SIV for deterministic, authenticated wrapping of key material
Csprng
security · low: OS-backed cryptographically secure random numbers (getrandom), and when a fast PRNG is not enough
Cryptographic hashes (SHA-2, BLAKE3)
security · low: Collision-resistant fingerprints of data; SHA-256 for interoperability, BLAKE3 for speed, HMAC/HKDF for keyed uses.
›
+ 18 more primitives
System
Techniques · 7
Primitives · 34
custody-wallet
Reorg safe chain indexing
finance · medium: Index blockchain events with confirmation depth, reorg rollback and finality tracking
Envelope encryption
security · medium: Encrypt each object with its own data key and wrap that key under a KMS-held key, so rotation re-wraps 60 bytes and deleting a key shreds data.
›
Hardware root of trust
security · medium: Secure elements/TPM/TEE holding device keys, attestation and monotonic counters
Hardware security module (HSM)
security · medium: A tamper-resistant device or service that generates keys, signs, decrypts and wraps with them internally, and releases a key only as ciphertext.
›
Tamper-evident audit log
security · medium: An append-only log whose Merkle root, signed per batch, lets anyone verify an entry is present and history was never rewritten, with log-size proofs.
›
Threshold ecdsa mpc
security · medium: Multi-party ECDSA signing (GG18/CMP-style) with presignatures and key refresh
Homomorphic encryption
security · medium: Additively homomorphic ElGamal/Paillier for encrypted tallies and private aggregation
Idempotency keys
finance · low: Client-chosen unique key per logical operation, stored with a request fingerprint and the final response, so retries replay the first result instead of acting twice.
›
Digital signatures (Ed25519)
security · low: Small, fast, deterministic public-key signatures that prove who produced a message; the default for tokens, releases and protocols.
›
ECDSA signatures
security · low: The elliptic-curve signature standardised in FIPS 186-5 (P-256) and used by secp256k1 ledgers; 64-byte signatures, but a repeated or biased nonce leaks the private key.
›
Shamir secret sharing (k-of-n)
security · low: Split a secret into n shares so any k reconstruct it and any k-1 reveal nothing at all, using a random polynomial over a finite field.
›
Checksummed address encoding
data-structures · low: Base58Check, Bech32 and EIP-55 address encodings with error-detecting checksums
Hierarchical deterministic keys
finance · low: BIP-32/39/44 seed phrases and child-key derivation paths for wallets
Authorization models (RBAC, ABAC, R…
security · low: How to decide who may do what to which object; roles for coarse rules, relationships for sharing, and checks on every object.
›
Elliptic curve arithmetic
security · low: Point addition, doubling and constant-time scalar multiplication in projective coordinates
HKDF key derivation (extract-and-ex…
security · low: HMAC-based two-step key derivation: extract a uniform pseudorandom key from any secret, then expand it into as many context-bound keys as you need.
›
Hierarchical state machine
systems · low: Nest states so a substate inherits its parent's reactions and only overrides what differs, with ordered entry and exit actions along the path.
›
Message sequence numbers
distributed · low: A per-stream counter on every message lets the receiver detect loss, duplicates and reordering, ack cheaply and resume after reconnect with "send from N".
›
Journaled state revert
storage · low: Undo journal of state writes enabling nested checkpoints and cheap revert
AEAD (AES-GCM, ChaCha20-Poly1305)
security · low: Authenticated encryption that encrypts and detects tampering in one call; the only kind of symmetric encryption you should use.
›
Aes key wrap
security · low: AES Key Wrap (RFC 3394/5649) and AES-GCM-SIV for deterministic, authenticated wrapping of key material
Csprng
security · low: OS-backed cryptographically secure random numbers (getrandom), and when a fast PRNG is not enough
Cryptographic hashes (SHA-2, BLAKE3)
security · low: Collision-resistant fingerprints of data; SHA-256 for interoperability, BLAKE3 for speed, HMAC/HKDF for keyed uses.
›
Hardware backed keystore
security · low: Non-exportable keys in Secure Enclave, StrongBox, TPM: generation, use policies, biometric gating
Key sealing
security · low: Encrypting data so only a specific measured enclave/boot state can decrypt it (TPM/SGX sealing)
Secure boot chain
security · low: Each boot stage verifies the signature of the next before running it, anchored in an immutable ROM key hash, with version counters against downgrade and a TPM log of what ran.
›
Dual control approval
security · low: Four-eyes / maker-checker approval with quorum policies for sensitive operations
Secure memory zeroization
security · low: Keep secrets in one locked, fixed-size, non-copyable region, erase them with writes the compiler must keep, and exclude them from dumps and swap.
›
Merkle tree
data-structures · low: Hash tree for verifying and diffing large datasets with logarithmic proofs
Segmented log
distributed · low: Split an append-only log into files named by their first offset, write only the newest, and find any record by binary search plus a sparse index.
›
Trusted timestamping
security · low: RFC 3161 time-stamp tokens: a TSA signs a hash with time, proving data existed then
Commitment schemes
security · low: Hash and Pedersen commitments: hide a value now, bind to it, reveal later
Sigma protocols
security · low: Schnorr and Chaum-Pedersen proofs of knowledge, OR-proofs for ballot validity
Big integer arithmetic
numerics · low: Multi-limb integer arithmetic (256-bit and up): carries, Karatsuba, Montgomery and Barrett reduction
Finite field arithmetic
numerics · low: Prime-field and extension-field arithmetic (Montgomery form, Goldilocks, BabyBear), vectorized
Number theoretic transform
numerics · low: FFT over finite fields for exact polynomial and big-integer multiplication
Fencing tokens
distributed · low: A number that grows with every lock grant and is checked by the protected resource, so a paused ex-holder's late write is rejected.
›
Leases
distributed · low: A lock that expires on its own: bounded-time ownership that survives crashes and partitions, given bounded clock drift and fencing tokens on writes.
›
PRNGs (PCG, xoshiro)
numerics · low: Small, fast, statistically strong non-cryptographic generators: PCG32 and xoshiro256**, with seeding, parallel streams and unbiased ranges.
›
Constant time code
security · low: Writing secret-dependent code without branches or memory lookups on secrets; constant-time compare and select
Exponential backoff with jitter
systems · low: Retry after delays that grow geometrically and are randomized, so failed clients spread out instead of hammering a recovering service in synchronized waves.
›
Copy for AI
Similar systems
Share the most building blocks with this one.
hsm-service
24 %
esim-provisioning
23 %
stablecoin
20 %
e-voting
18 %
secrets-kms
18 %