A look inside Cranmera.

Features

  • Data protection at-rest and in-use.
  • High throughput through full asynchronicity and multi-core scaling.
  • On-premise and cloud support.
  • Strong security through peer-reviewed protocols and formally verified cryptographic primitives.
  • Monitoring out-of-the box.

Modules

Secure input

A secure input module:
Transforms input data immediately into encrypted data ("secret shares").

Supports inputs via API, web client or otherwise. Applies a technique called secret-sharing. Ensures that inputs are securely shared with the calculation module.

Secure compute and storage

A calculation module:
Calculates required statistics (e.g. analytics, benchmarking, etc.) on secret inputs. All data remains private during computation.

A secure storage module:
Stores data in encrypted form to ensure that nobody can access it unless mutually agreed upon.

Both calculation and storage are administered by trustees appointed by you, tasked with approving operations on the sensitive data.

Secure output

A re-encryption module:
Enables forwarding of results privately to designated receivers.

The secure storage and re-encryption modules together allow you to store results securely and forward data to
receivers as needed.