MPC

Key points

• MPC, short for multi-party computation, splits control of a private key across multiple parties.
• No single party holds the entire key, and a transaction is only authorized with the collaboration of the required parties.
• It eliminates the single point of failure of a whole key, but depends on a correct cryptographic implementation.

What is MPC?

MPC is the acronym for secure multi-party computation. It is a cryptographic technique in which several parties jointly compute something without any of them revealing their secret share to the others. Applied to crypto custody, MPC makes it possible to split control of a private key among multiple participants, so that the entire key never exists in a single place or in the hands of just one party.

How it works

Instead of generating a whole private key and storing it, an MPC scheme creates fragments that are distributed among different parties, which can be devices, people, or services. To authorize a transaction, these parties collaborate in a joint computation that produces a valid signature, without any of them needing to reveal its fragment or reconstruct the complete key. The whole key, therefore, never comes to exist assembled in a single point.

The main benefit is eliminating the single point of failure. Since there is no whole key stored anywhere, an attacker who compromises only one of the parties cannot move the funds: a sufficient number of fragments would need to be compromised at the same time. This spreads out the risk and allows flexible arrangements, in which authorization requires the collaboration of several parties, without the rigidity of keeping a single key.

MPC is widely used by custody solutions aimed at businesses and by services that require high security, often compared to multisignature schemes, which pursue a similar goal through a different path. Its security, however, depends on a correct cryptographic implementation and on protecting each fragment and each party involved. Because it is technically sophisticated, a poorly implemented MPC can introduce its own flaws, and trust in the arrangement depends on who operates it and how it was built.

Understanding MPC helps in understanding one of the modern approaches to protecting control over keys.

Why it matters

Understanding MPC helps in understanding how modern custody solutions distribute control of a key to eliminate single points of failure. For a business evaluating asset custody, it is a relevant security concept. It is a technical concept, and this does not represent any operating recommendation.

Risks and limitations

MPC's security depends on a correct cryptographic implementation; a poorly built scheme can introduce its own flaws. Each fragment and each party need to be protected, and trust in the arrangement depends on who operates it. Because it is sophisticated, it is harder to evaluate than simple approaches. Nothing here represents an operating recommendation.