List of Terminologies

Terms	Descriptions
Hosted Sandbox	The Hosted Sandbox provides a hands-on environment for users to explore and evaluate our TSM-enabled wallet solution without local installation. Accessible via SDKs or TLS certificates, it supports testing and Proof of Concept (PoC) projects. This sandbox is for demonstration purposes only and is not intended to replicate a production environment.
TSM	Threshold Security Module. A virtual Hardware Security Module (HSM) implemented via MPC. Key shares are distributed across MPC nodes without ever reconstructing the full private key.
MPC	Multi-Party Computation enables multiple independent parties to jointly perform cryptographic operations without revealing their individual key shares.
MPC Node	An instance that holds a share of a private key and work with other nodes to perform cryptographic operations without ever reconstructing the full key.
Administration Policy	Administration Policy is a collection of administrative regulations governing all wallet operations.
EncryptorMasterPassword	The password or key file creates encryption and authentication keys to safeguard sensitive data within the persistent MPA DB.
ERS	Emergency Recovery Service. The ERS application is not part of Builder Vault TSM. It only provides an option to create an ERS backup.
Message Broker	Middleware facilitating communication between MPC nodes.
Key Derivation	Process of generating one or more cryptographic keys from a master key.
PK	Public Key.
SK	Secret Key.
RSA	A widely used asymmetric encryption and digital signature algorithm, supported for threshold key generation and signing.
AES	Advanced Encryption Standard. A symmetric encryption algorithm used for securing data at rest or in transit.
HMAC	Hash-Based Message Authentication Code. A keyed cryptographic hash used to verify message integrity and authenticity.
OIDC	An external Open ID Connect is an authentication service to verify user identities and provide secure access tokens to the wallet.