Abstract: Disclosed herein is a trusted platform module (TPM) for authenticating a secure system, the TPM including: one or more registers to automatically generate and maintain hash values indicating current state values of the TPM, secure memory to store a key in association with a secure system, and a processor in network communication with the registers and the secure memory. During a secure boot up process, the processor can perform operations including: deriving the key for the secure system from the hash values that are automatically generated by the one or more registers, calculating a Hash-based Message Authentication Code (HMAC) value using the key, generating, based on the HMAC value, an authentication login token for the secure system, and advancing the hash values that are maintained by the one or more registers from their initial state during the secure boot up process.

Abstract: The disclosed technology provides for managing, authenticating, and authorizing transactions utilizing multi-party-computation (“MPC”) across a network. A method includes receiving, by a server, policy data defining a transaction signing policy, receiving, from an initiator node, a transaction request, in response to receiving the transaction request: (i) determining, based on the transaction signing policy, a threshold number of virtual nodes in a cloud environment that are included in a transaction signing group and that are required to authorize the transaction request, and (ii) sending, to each of the virtual nodes, an authorization request to authorize the transaction request, receiving, from at least a subset of the virtual nodes, authorization data indicating that the transaction request has been authorized, and returning, to a hardware security module (HSM), a transaction payload based on processing the authorization data.

Abstract: Disclosed are systems, methods, and techniques for transmitting encrypted data over a network. A system can include a group of nodes having secure communication to transmit encrypted data from a source to a final destination. The encrypted data can be transmitted in a packet that can include a previous hop in the network and a subsequent hop, where the packet excludes the final destination. A first node in the group can: receive the encrypted data from the source through a first secure connection, the encrypted data being wrapped, by the source, using the first secure connection, unwrap the data, determine whether routing parameters are met based on the unwrapped data, in response to determining that the routing parameters are met, identify a corresponding second secure communication, rewrap the data using the corresponding second secure connection, and transmit the rewrapped data to the subsequent hop using the corresponding second secure connection.