For Fireblocks’ recommended embedded wallet solution, see Dynamic Embedded Wallets. The documentation below covers the legacy Embedded Wallet APIs and SDKs.
2-of-2 MPC signature scheme
The Fireblocks Embedded Wallet (EW) feature uses a 2-of-2 multi-party computation (MPC) signature scheme to enhance the security of digital signatures. This cryptographic technique involves two parties collaborating to generate a signature. This reduces the risk of single-party compromise and enhances the overall integrity of transactions. One key share resides on the end-user’s device (mobile or web), and the second key share is securely maintained within an Intel SGX-enabled server managed by Fireblocks. Intel SGX technology ensures that the key material stored in the SGX enclave is isolated, protected, and resistant to unauthorized access.
End-user key share management: Fireblocks provides web and mobile SDKs to customize how you configure your key loading and key saving process. This enables you to implement security measures, such as mobile enclave, biometric authentication, two-factor authentication (2FA), and more.The SDK itself is agnostic to the specific implementation of key storage, which is passed to it upon initialization.