Skip to Content
DocumentationSecurityConfidential Computing (TEE)

Confidential Computing (TEE)

The Vault’s server signers run inside a hardware-attested Trusted Execution Environment (TEE) — Intel TDX — so the signing process and its key share are isolated from the host operating system, the hypervisor, and cloud-provider operators.

What It Protects

  • Memory isolation — the signer’s memory is encrypted by the CPU. A compromised host or hypervisor cannot read the key share while it is in use.
  • Attested code — a signer only receives its key material after proving, via hardware-signed attestation, that it is running the expected, unmodified code. A tampered signer is refused and never starts.
  • No operator access — cloud and infrastructure operators cannot inspect or extract signing material.

Scope

Confidential computing applies to the server-side signers. Mobile signer key shares are protected separately — see the MPC Security Model.

The detailed attestation flow, reference-value management, sealing scheme, and supported TEE platforms are part of the security model provided to customers under NDA.

OverviewNetwork Security