Abstract: Methods, systems, and devices for data management are described. A custodial token platform may communicate with a client to support a multi-party computation (MPC) signature for a message. A central coordinator may receive, from the client, a request to sign a message using respective key shares generated by MPC nodes. The key shares may be generated in accordance with an access structure, where the access structure is configured based on a respective set of parameters for the MPC nodes. The central coordinator may transmit a request to execute a MPC signature using a respective key share. The central coordinator may maintain data associated with execution of the MPC signature function by a subset of the MPC nodes using the respective key shares. Additionally, the central coordinator may transmit, to the client, a result of execution of the MPC signature function by the subset of the MPC nodes.

Abstract: Methods, systems, and devices for token management are described. A custodial token platform may communicate with a wallet application to support a multi-party computation wallet and transfer of private keys and key shards to support wallet cloning and key export. The custodial token platform may receive a message signed by a first key shard, sign the message using a second key shard, and broadcast the signed message to transfer a token between the wallet application and a recipient address. The custodial token platform may receive an encrypted payload including the first key shard, and transmit the encrypted payload to a second client application for decryption by the second client application on a second user device. Additionally, the wallet application may support export of the private key based one or multiple authentication techniques, which may cause retrieval of the key shards and display of an indication of the private key.

Abstract: Methods, systems, and devices for token management are described. A custodial token platform may communicate with a wallet application to support a multi-party computation wallet and transfer of private keys and key shards to support wallet cloning and key export. The custodial token platform may receive a message signed by a first key shard, sign the message using a second key shard, and broadcast the signed message to transfer a token between the wallet application and a recipient address. The custodial token platform may receive an encrypted payload including the first key shard, and transmit the encrypted payload to a second client application for decryption by the second client application on a second user device. Additionally, the wallet application may support export of the private key based one or multiple authentication techniques, which may cause retrieval of the key shards and display of an indication of the private key.

Abstract: A method for recovering data from a database, the method performed by a device having a processor, the method including encrypting information stored in the database using an encrypting cryptographic key, sending encrypted information associated with a specific entity to a remote device associated with the specific entity, where the remote device lacks access to a decrypting cryptographic key enabled to decrypt the information associated with a specific entity, upon failure of the database, sending the encrypted information associated with the specific entity from the remote device to a recovering server, and decrypting the encrypted information by the recovering server.

Abstract: A computerized system and method for symmetric encryption and decryption using two machines, the method including obtaining a message and an initialization vector on a first machine, sending the initialization vector to a second machine, where said second machine stores an encryption key for a Key Derivation Function (KDF), generating a derived key on the second machine by applying the KDF receiving as input both the encryption key and the initialization vector, sending the derived key from the second machine to the first machine, and encrypting the message using the derived key on the first machine.

Abstract: Preventing misuse of a cryptographic key by receiving a request to carry out a cryptographic operation using a cryptographic key from a requesting entity, distributing the request to a quorum comprising multiple computerized devices, receiving a decision from the multiple computerized devices on whether or not the cryptographic operation using the cryptographic key is allowed, and carrying out the cryptographic operation using the cryptographic key according to the decision from the multiple computerized devices.

Abstract: A method for recovering data from a database, the method performed by a device having a processor, the method including encrypting information stored in the database using an encrypting cryptographic key, sending encrypted information associated with a specific entity to a remote device associated with the specific entity, where the remote device lacks access to a decrypting cryptographic key enabled to decrypt the information associated with a specific entity, upon failure of the database, sending the encrypted information associated with the specific entity from the remote device to a recovering server, and decrypting the encrypted information by the recovering server.

Abstract: Preventing misuse of a cryptographic key by receiving a request to carry out a cryptographic operation using a cryptographic key from a requesting entity, distributing the request to a quorum comprising multiple computerized devices, receiving a decision from the multiple computerized devices on whether or not the cryptographic operation using the cryptographic key is allowed, and carrying out the cryptographic operation using the cryptographic key according to the decision from the multiple computerized devices.

Abstract: A computerized system and method for symmetric encryption and decryption using two machines, the method including obtaining a message and an initialization vector on a first machine, sending the initialization vector to a second machine, where said second machine stores an encryption key for a Key Derivation Function (KDF), generating a derived key on the second machine by applying the KDF receiving as input both the encryption key and the initialization vector, sending the derived key from the second machine to the first machine, and encrypting the message using the derived key on the first machine.