IBM Digital Asset Platform Powered by Dfns

IBM Digital Asset Platform Powered by Dfns is a key orchestration service that provides flexible deployment options for cryptographic key management across cloud, hybrid, and on-premises environments. The platform uses Multi-Party Computation (MPC) cryptography to distribute key shares across data centers, eliminating single points of failure through periodically refreshed key shares. The service supports multiple deployment models including fully managed SaaS, hybrid cloud configurations, and on-premises installations. Organizations can host MPC key material within their own infrastructure, including integration with hardware security modules (HSMs) and secure enclaves such as AWS Nitro, IBM OSO, and Thales confidential computing environments. The platform offers programmable wallet ownership controls, allowing organizations to define access permissions for developers, administrators, or end users. It supports various wallet configurations including segregated, per-user, and omnibus setups. The MPC protocol scales from 2 to hundreds of signers with threshold signing capabilities. Key management features include secure key import and export functionality, support for multiple cryptographic algorithms (ECDSA, EdDSA, STARK, Schnorr), and various derivation standards (BIP, SLIP). The platform provides multi-factor authentication options including passkey, PIN, U2F devices, and passwords. The service includes disaster recovery configuration options and integrates with enterprise systems through APIs. It supports compliance requirements by enabling key deployment in specific geographic locations and environments based on regulatory needs.