Infrastructure

Enterprise-grade security infrastructure

Vertically integrated infrastructure stack with HSM, MPC, and post-quantum cryptography. Built for institutions that demand the highest security standards.

Architecture Overview

Complete infrastructure stack from key management to consensus

Your Application
↓
Lux API
↓
Lux IAM
Lux KMS
Lux MPC
↓
HSM
Threshold Signing
Post-Quantum
↓
Lux Node (Consensus)

Infrastructure Components

Modular components that work together or standalone

Lux KMS

Enterprise key management with HSM integration. AWS CloudHSM, Azure Dedicated HSM, and Thales support.

Lux MPC

Multi-party computation for threshold signing. Self-hosted custody with 2-of-3, 3-of-5, or custom schemes.

Lux IAM

Enterprise identity management. SAML, OIDC, OAuth 2.0 with role-based access control.

Post-Quantum Security

Future-proof cryptography via Lux Node. CRYSTALS-Dilithium, Kyber, and SPHINCS+ support.

Node Infrastructure

Full blockchain backend with bootnodes, validators, and archive nodes for complete sovereignty.

MCP Server

Model Context Protocol for AI-powered bank operations. Natural language queries via ZAP protocol.

Lux MPC

Self-Hosted Custody with Threshold Cryptography

Multi-party computation enables secure key management without any single party having access to the complete key. Our threshold signing schemes ensure that compromise of one party cannot lead to asset loss.

Threshold signing (2-of-3, 3-of-5, custom)
Shamir's Secret Sharing for key distribution
Offline key generation and cold storage
Social recovery with trusted parties
No single point of failure
Air-gapped signing ceremonies
mpc-signing.ts
<span class="keyword">import</span> { LuxMPC } <span class="keyword">from</span> <span class="string">'@luxbank/mpc'</span>;

<span class="keyword">const</span> mpc = <span class="keyword">new</span> <span class="property">LuxMPC</span>({
  <span class="property">threshold</span>: <span class="number">2</span>,
  <span class="property">parties</span>: <span class="number">3</span>,
  <span class="property">keyShareHolders</span>: [
    { <span class="property">id</span>: <span class="string">'party1'</span>, <span class="property">endpoint</span>: <span class="string">'https://p1.internal'</span> },
    { <span class="property">id</span>: <span class="string">'party2'</span>, <span class="property">endpoint</span>: <span class="string">'https://p2.internal'</span> },
    { <span class="property">id</span>: <span class="string">'party3'</span>, <span class="property">endpoint</span>: <span class="string">'https://p3.internal'</span> },
  ],
});

<span class="comment">// Generate distributed wallet</span>
<span class="keyword">const</span> wallet = <span class="keyword">await</span> mpc.<span class="property">generateWallet</span>({
  <span class="property">chain</span>: <span class="string">'polygon'</span>,
  <span class="property">currency</span>: <span class="string">'USDC'</span>,
});

<span class="comment">// Sign with threshold parties</span>
<span class="keyword">const</span> sig = <span class="keyword">await</span> mpc.<span class="property">sign</span>({
  <span class="property">walletId</span>: wallet.<span class="property">id</span>,
  <span class="property">transaction</span>: txData,
});

Post-Quantum Cryptography

Future-proof security against quantum computing attacks

AlgorithmType
CRYSTALS-DilithiumNIST Level 3Digital Signatures
CRYSTALS-KyberNIST Level 3Key Encapsulation
SPHINCS+NIST Level 5Hash-Based Signatures
Hybrid ModeTransition ReadyClassical + PQ
post-quantum.ts
<span class="keyword">import</span> { LuxNode } <span class="keyword">from</span> <span class="string">'@luxbank/node'</span>;

<span class="keyword">const</span> node = <span class="keyword">new</span> <span class="property">LuxNode</span>({
  <span class="property">network</span>: <span class="string">'mainnet'</span>,
  <span class="property">crypto</span>: {
    <span class="comment">// Hybrid mode: classical + post-quantum</span>
    <span class="property">mode</span>: <span class="string">'hybrid'</span>,
    <span class="property">pqAlgorithm</span>: <span class="string">'dilithium3'</span>,
    <span class="property">classicAlgorithm</span>: <span class="string">'ecdsa-secp256k1'</span>,
  },
});

<span class="comment">// Generate post-quantum keypair</span>
<span class="keyword">const</span> keypair = <span class="keyword">await</span> node.crypto.<span class="property">generateKeypair</span>({
  <span class="property">algorithm</span>: <span class="string">'dilithium3'</span>,
});

<span class="comment">// Sign with hybrid scheme</span>
<span class="keyword">const</span> signature = <span class="keyword">await</span> node.crypto.<span class="property">sign</span>({
  <span class="property">message</span>: transactionData,
  <span class="property">keypair</span>,
  <span class="property">mode</span>: <span class="string">'hybrid'</span>,
});
Post-Quantum Ready

Prepared for the Quantum Era

Quantum computers pose an existential threat to current cryptographic systems. Our hybrid approach provides security today while building quantum resistance for tomorrow.

NIST-approved lattice-based algorithms
Hybrid mode for gradual transition
Hash-based signatures for long-term security
Backward compatible with existing systems

AI-Powered Operations

Model Context Protocol for intelligent bank management

MCP Server + ZAP Protocol

Natural Language Banking

Our MCP server exposes bank operations to AI assistants via secure tool interfaces. Combined with ZAP protocol for browser communication, operators can manage the entire platform through conversation.

Query accounts, balances, and transactions
Initiate and approve payments
Generate compliance reports
Manage user permissions
mcp-tools.json
{
  <span class="property">"tools"</span>: [
    {
      <span class="property">"name"</span>: <span class="string">"get_account_balance"</span>,
      <span class="property">"description"</span>: <span class="string">"Get balance for account"</span>,
      <span class="property">"parameters"</span>: {
        <span class="property">"account_id"</span>: { <span class="property">"type"</span>: <span class="string">"string"</span> }
      }
    },
    {
      <span class="property">"name"</span>: <span class="string">"create_payment"</span>,
      <span class="property">"description"</span>: <span class="string">"Create a new payment"</span>,
      <span class="property">"parameters"</span>: {
        <span class="property">"amount"</span>: { <span class="property">"type"</span>: <span class="string">"number"</span> },
        <span class="property">"currency"</span>: { <span class="property">"type"</span>: <span class="string">"string"</span> },
        <span class="property">"recipient"</span>: { <span class="property">"type"</span>: <span class="string">"string"</span> }
      }
    }
  ]
}

Build on enterprise-grade infrastructure

Contact us to learn how Lux Infrastructure can power your operations.