Secure Multi-Party Computation (SMPC or MPC) is a cryptographic technique that enables multiple parties to jointly compute a function over their private inputs without any party revealing their individual data to others.
In the context of cryptocurrency, MPC is most prominently used in “MPC wallets” and institutional custody solutions – where signing authority is distributed across secret shares held by different parties or devices, and cryptographic signing occurs as a collaborative computation without the full private key ever existing in one place.
This reduces the risk from a single compromised share, but security still depends on the protocol, thresholds, recovery design, and implementation. (Source: NIST-Schwellenwertkryptographie)
MPC Key Management
Traditional single-key wallet: A private key authorizes transactions. If that key is compromised, an attacker may be able to spend the funds it controls; protection depends on how the key is stored and used.
Illustrative 2-of-3 MPC wallet: three parties or devices hold separate signing shares. Distributed key generation can avoid constructing the complete key. Actual wallet designs vary.
Any two authorized parties jointly generate a valid signature in this example. One share alone is insufficient to sign; collusion, malware, or recovery failures can still compromise the wallet.
MPC in Crypto: Applications
| Anwendung | How MPC Is Used | Beispiel |
|---|---|---|
| Institutionelle Verwahrung | Key shares across geographic regions | Fireblocks, Copper.co |
| Consumer MPC wallets | Threshold signing; exact design varies | Zengo (two-party signing) |
| DAO multi-sig alternative | MPC threshold signing vs. Gnosis Safe | Fordefi |
| DeFi-Sicherheit | Protocol admin key management | Mehrere Protokolle |
| Exchange key management | Signing infrastructure | Binance, major exchanges |
Holen Sie sich die UPay Crypto Card
Erleben Sie das Beste aus Online-Zahlungen und nahtlosen Krypto-Transaktionen.
Jetzt registrierenMPC vs. Multi-Signature (Multisig)
| Funktion | Multisig (for example, Safe) | MPC |
|---|---|---|
| On-Chain-Fußabdruck | Often visible; some aggregated-signature designs conceal it | Appears as standard single-sig |
| Gaskosten | May be higher, depending on chain and implementation | Standard (single signature) |
| Datenschutz | Multisig structure revealed | Threshold signature can resemble an ordinary signature; other metadata may reveal the setup |
| Key existence | Full keys exist at each signer | Key shares only; full key never assembled |
| Smart Contract erforderlich | Common on EVM chains; native and aggregated designs also exist | Not necessarily; requires a signature scheme supported by the chain |
| Kettenkompatibilität | Chain-specific implementations | Depends on supported signing algorithms and integrations |
FAQ
Q: Is an MPC wallet self-custodial?
A: It depends on who can sign, veto transactions, and recover access. Zengo uses a two-of-two signing model with a personal share and a server share, not a two-of-three wallet. Its three-factor recovery process is separate from the signing threshold. Review provider-dependency and recovery arrangements before treating an MPC wallet as self-custodial. (Source: Berkeley MPC study)
Q: How secure is MPC compared to traditional wallets?
A: MPC can reduce the risk that one stolen key share compromises a wallet. It is not automatically safer than every single-key or multisignature arrangement: security also depends on software, authorization policies, share independence, backups, and recovery procedures.
Q: What happens if one MPC share is lost?
A: In a two-of-three design, two usable shares can still sign after one is lost. Other thresholds behave differently. Zengo’s recovery restores the personal share using its recovery process; it is not an example of a spare third signing share. (Source: NIST threshold security criteria)
Verwandte Begriffe
· Fireblocks
· Key Management
Fazit
Secure Multi-Party Computation (SMPC) can distribute signing authority, but security depends on the threshold, implementation, and recovery design. Check those details before relying on a wallet’s marketing claims.
Weiterführende Informationen zu UPay: Sicherheit des privaten Schlüssels; Krypto-Wallet-Typen; Selbstverwahrung erklärt
