Best Silence Laboratories Silent Network Alternatives & Competitors in 2026

Real-time transaction security for Web3 wallets and blockchain transactions

Bunker Trusted Recovery is a reference architecture from Station70 for recovering encrypted backups through a quorum based, multi party approval process. It splits a backup encryption key across three independent security domains: a customer share held by a quorum of approvers, an operations HSM share, and a cloud KMS share. Recovery requires all three domains and a customer defined M of N approval policy before any decryption occurs. Approving members authenticate and decrypt their portion of the customer share in a browser using a FIDO2 YubiKey, producing key material that is wrapped so only Station70's trusted execution environment (a Nitro Enclave) can use it. A single tenant CloudHSM in a separate AWS account decrypts the HSM share, and the TEE uses AWS KMS to decrypt the cloud share. Inside the enclave, the three shares are combined with Lagrange interpolation to reconstruct the backup encryption key, which is then used to decrypt the stored backup package layer by layer. The recovered backup is re encrypted to the customer's designated recovery public key before leaving the enclave, so it never exists in plaintext outside the TEE. The architecture is designed so Station70 cannot initiate or complete a recovery unilaterally, client browser compromise cannot leak usable key material due to transport wrapping, and if an approval policy becomes unsatisfiable due to lost devices or departed members, the backup is deleted and re ingested rather than the security requirement being weakened. Key components include a recovery policy engine for configuring approval thresholds, a browser based decryption site for approvers, a single tenant operations HSM, a Nitro Enclave TEE that performs reconstruction and decryption, and a ciphertext manager that serves encrypted material to the TEE at recovery time.</description> <parameter name="summary">Quorum based, TEE enforced recovery architecture for decrypting encrypted backups across 3 domains

MPC-as-a-Service TSS platform for secure digital wallet key management.

MPC-based 2FA MetaMask Snap for distributed self-custodial wallets.