Frequently Asked Questions

The following sections contain answers to some of the frequently asked questions about CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions..

System

On a private cloud.
On a public cloud (e.g. AWS, Azure, GCP).
On premise.
Hybrid deployment (On premise and public cloud).

Security

How does the CASP Multi-party signature differ from Multisig?

Multisig generates multiple signatures, whereas CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. MPCMultiparty computation - A methodology for parties to jointly compute a function of their inputs while keeping those inputs private. creates just a single signature. Therefore, CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. MPCMultiparty computation - A methodology for parties to jointly compute a function of their inputs while keeping those inputs private. needs to process less data, making it more efficient, which translates into better performance on the miner side.

CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. MPCMultiparty computation - A methodology for parties to jointly compute a function of their inputs while keeping those inputs private. has a more sophisticated quorumOne or more groups, comprised of participants authentication scheme for the approvers. For example, you can have 4 out of 6 required to approve from an external group and 2 out of 4 required to approve from the internal group. This type of quorumOne or more groups, comprised of participants is very hard to implement with multisig (which usually performs only 2 out 3 quorumOne or more groups, comprised of participants authentication).

What is the different between Shamir’s Secret Sharing and what Unbound does?

In general, Shamir's Secret Sharing provides a solution for sharing a key between many participants and enforcing some or all of them (quorumOne or more groups, comprised of participants) to participate in key usage. Combining this technique with MPCMultiparty computation - A methodology for parties to jointly compute a function of their inputs while keeping those inputs private., which is what Unbound does, allows using the key (for signing, encryption, etc), without ever assembling the key. This benefit is the result of MPCMultiparty computation - A methodology for parties to jointly compute a function of their inputs while keeping those inputs private., which allows a set of parties to compute a function without revealing the secret data, which in this case are the Shamir Secret Shares. See the Unbound website for more information.

Wallets

Which ledgers are supported?

CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. supports two types of implementations for handling different types of ledgers. CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. provides built-in support for some types of ledgers, as described Built-in Wallets.

CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. also provides the necessary APIs so that you can bring your own wallet (BYOWBring Your Own Wallet - support any coin or crypto asset type using the CASP APIs to control the vault and key operations.), meaning that you can use whatever ledger you have, and control the vault and key operations with CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions.. Using BYOWBring Your Own Wallet - support any coin or crypto asset type using the CASP APIs to control the vault and key operations., you can create an implementation that can handle any coin type, as well as any special operations that you use to communicate with your ledger and for ledger processing.

You may want to use BYOWBring Your Own Wallet - support any coin or crypto asset type using the CASP APIs to control the vault and key operations. when using one of the built-in chain adaptors, but need other features, such as using your own nodes and address caching. You may already have management in your application for one of the built-in chain adaptors and want to use CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. for key management and protection. BYOWBring Your Own Wallet - support any coin or crypto asset type using the CASP APIs to control the vault and key operations. provides the flexibility to be used with any blockchain application.

Integration/Operation

What are some common use cases for CASP?

CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. is a flexible platform that can be used in a variety of use case, including the following:

Exchanges - Increase velocity and secure your internal vaults by applying MPCMultiparty computation - A methodology for parties to jointly compute a function of their inputs while keeping those inputs private.-based cryptographic enforcement to transactions’ approval schemes.
Custodians - Leverage a bank-grade crypto assetDigital information that needs to be securely stored. security platform to serve your retail and institutional customers, who are seeking crypto assetDigital information that needs to be securely stored. custodian and trading services.
Trading Platforms – Secure transfers between counter-parties by applying MPCMultiparty computation - A methodology for parties to jointly compute a function of their inputs while keeping those inputs private.-based cryptographic approval policies.
System Integrators - Leverage a mature SDK package to empower your customers to profit from emerging opportunities and market dynamics with the ultimate secure crypto assetDigital information that needs to be securely stored. security platform.

Does CASP support HD wallets?

Yes, CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. provides support for hierarchical deterministicCalculation that each time results in the same value (HDHierarchical Deterministic - a type of deterministic Bitcoin wallet derived from a known seed, that allows for the creation of child keys from the parent key. Because the child key is generated from a known seed there is a relationship between the child and parent keys that is invisible to anyone without that seed.) wallets using the BIP32 and BIP44 HDHierarchical Deterministic - a type of deterministic Bitcoin wallet derived from a known seed, that allows for the creation of child keys from the parent key. Because the child key is generated from a known seed there is a relationship between the child and parent keys that is invisible to anyone without that seed. wallet standards.

How do I connect AML and a customer ID?

It is recommended to use an AMLAnti-Money Laundering and customerThe entity that initially holds the crypto asset and requests storage in the crypto asset vault. ID approver server/person as one of the participants in the approval process (within a separated group) as a bot approver. By doing so, the AMLAnti-Money Laundering participantA member of any of the quorum groups. denies a transaction when a suspicious person is trying to transact money.

An additional benefit of this strategy is the ability to produce AMLAnti-Money Laundering-based reports to a regulator, proving that each transaction went through an AMLAnti-Money Laundering check.

How is backup approval handled?

The platform creates a secure backup of the key parts without ever bringing the parts together. The process is supported both for standard keys as well as BIP seeds. The key/seed is encrypted with an RSA key, which can be kept in cold backup, HSMHardware Security Module - a physical computing device that safeguards and manages digital keys for strong authentication and provides cryptoprocessing, or any other secured component.

It is important to note that the platform provides a zero-knowledgeA method by which one party can prove to another party that it knows a value x, without conveying any information apart from the fact that it knows the value x. proof that the content of the encrypted backup matches the public key. Meaning that when backing up the key, no party can cheat and cause key loss. The platform verifies backup content (without decrypting it, only using the RSA public key) and secured storage of it before the first deposit of money into the vault.

Is there an integration with a NaaS provider?

CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. provides integration with the nodes of BRD using their Blockset product. Blockset by BRD is designed for blockchain data with wallets, blockchain explorers, and data aggregators in mind - and (unlike raw full nodes) is designed to handle unlimited scale. Blockset by BRD handles the full nodes, pipes the data into a straightforward schema, and makes it publicly accessible via the blockset API.

Does CASP support completely offline participants?

Yes. CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. supports bots that do not have any network connection and only send and receive information by manually transferring the data using hard media, such as a USB drive. See Offline Bots for more information.

Does CASP integrate with HSM's and/or secured key stores?

The CASP bot can be integrated with an HSMHardware Security Module - a physical computing device that safeguards and manages digital keys for strong authentication and provides cryptoprocessing. Integration is accomplished using the CASP Java SDK to extend the CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. bot capabilities, allowing it to store data and create keys in an HSMHardware Security Module - a physical computing device that safeguards and manages digital keys for strong authentication and provides cryptoprocessing. The integration is shown in the following figure.

Is CASP easy to demo and test?

Yes. CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. can quickly be installed and used for demos, POCs, and development using CASP Express Deploy. This solution is a complete CASPUnbound’s Crypto Asset Security Platform (“CASP”) provides the advanced technology and the architecture to secure crypto asset transactions. system that is deployed and configured using Docker or Terraform.