Nobody Knows the Key,
Not Even You
TEE-based encrypted key-value storage with CKD (Confidential Key Derivation). Hardware-backed security for your most sensitive data.
Security-First Architecture
CKD Key Derivation
Keys derived from hardware seed inside TEE. Deterministic, secure, and nobody can access them.
AES-256-GCM Encryption
Military-grade authenticated encryption with 256-bit keys and 128-bit authentication tags.
Group-Based Access
Fine-grained permissions with user isolation. user.near/private only accessible by owner.
Attestation
Every response includes cryptographic proof that code executed inside genuine TEE hardware.
Client-Side Security
Encryption happens client-side to protect data in transit. Network requests are always ciphertext-only.
High Performance
First call ~1.2s, cached calls ~0.9s. Cost-effective at ~$0.005 per cached operation.
Use Cases
🔐Encrypted User Profiles
GDPR-friendly user data storage. Encrypt sensitive user information with user-controlled keys.
await kv.set('profile', {
name: 'Alice',
email: 'alice@example.com',
ssn: '123-45-6789'
});👥Team Secrets
Share encrypted secrets among team members with group-based access control.
// Only team members can access
await kv.set('team/api-key',
'secret-key-123',
{ group: 'team.near/developers' }
);💰TEE Wallet
Store private keys securely. Keys never leave the secure enclave during derivation.
// Private keys encrypted at rest
await kv.set('wallet/private-key',
privateKey,
{ group: 'user.near/wallet' }
);📊Encrypted Key-Value Storage
General-purpose encrypted storage for any sensitive data.
// Any data you need to encrypt
await kv.set('any-data',
sensitiveInformation,
{ group: 'user.near/private' }
);Ready to Secure Your Data?
Start encrypting with hardware-backed security today.