Docs / HSM

HSM

The key that signs blocks lives in a program called 2d-hsm. It runs inside a measured enclave (AMD SEV-SNP): the host can ask it to sign, and the host cannot read the key.

The signing program

HSM here is that enclave: a measured signing program, started from a known image, with the key sealed to the image. Block pages label the producer 2d-hsm · ML-DSA-65. Your MetaMask account is a different key, on your machine.

Blocks

The enclave holds the ML-DSA-65 key that signs each block hash. How to read the badge and the fingerprint is on PQ signatures.

Agents

Wallets assigned to agents are signed in the same enclave family. That path is separate from public JSON-RPC. With MetaMask, you still sign locally with secp256k1. The agent never sees the key.

What stays yours

The explorer and the public RPC see signatures. Taking them apart does not reveal the producer key. Your seed stays in your wallet. Anyone who has that seed can move that account’s USDC. The enclave does not hold it.