WAKENEX觉醒联盟
Signal觉醒信号Note短评

Google's Multi-Party Compute buys stronger key security at one new dependence.谷歌的 Multi-Party Compute 用更强的密钥安全,换来一项新的依赖。

Share on X分享到 X

Bright editorial illustration: a single golden key has shattered into five glowing shards, each sealed in its own small glass vault, and all five vaults stand in a row on top of one large data-center block whose front bears a Google wordmark, with thin light beams tying the shards down to that single block, against a bright teal-and-amber sky with empty space at left. Headline: The Key Splits, Google Holds Every Piece. Chinese line: 密钥拆成碎片,每一块都在谷歌手里.
Bright editorial illustration: a single golden key has shattered into five glowing shards, each sealed in its own small glass vault, and all five vaults stand in a row on top of one large data-center block whose front bears a Google wordmark, with thin light beams tying the shards down to that single block, against a bright teal-and-amber sky with empty space at left.明亮的编辑插画:一把金色钥匙碎成五块发光的碎片,每块都封在各自的小玻璃保险柜里,五个保险柜并排立在一整块数据中心机体之上,机体正面印着 Google 字标,几道细光束把碎片连到这一整块机体上;背景是明亮的青蓝与琥珀色天空,左侧留白。Google wordmark: Google / Wikimedia Commons · Public domainGoogle wordmark: Google / Wikimedia Commons · Public domain

Your coins now move only when Google's cloud agrees to sign. That is the trade worth seeing.

Unveiled October 28 at Google's first MPC symposium in New York, the service splits a private key into fragments held on separate systems, so no single breach hands over the whole key. That part is real security. Alphabet already runs its own Ethereum and Solana holdings on it, general availability is slated for early 2027, and the target is clearly Fireblocks and BitGo.

But splitting the key does not remove the dependence; it relocates it. The fragments, the signing coordination, and the machines all sit inside one cloud. The failure you engineer out is a hacker stealing the key. The failure you engineer in is the vendor declining to sign: an outage, a compliance hold, a jurisdiction. The single point of failure moved from your attacker to your supplier.

The custody layer of money that was supposed to need no trusted third party is consolidating into the same hyperscalers that already run traditional finance. Alphabet securing its own coins on its own product is the tell.

So before adopting it, price the trade: can you keep a decisive fragment, or the signing quorum, off Google and migrate without its cooperation? If not, you swapped theft risk for vendor risk. We would revise this if Google's general-availability terms let institutions hold a decisive fragment outside its cloud and migrate at low cost.

Research, not investment advice.

你的币,从此只有在谷歌的云同意签名时才动得了。这就是值得看清的那笔交易。

这项服务 10 月 28 日在谷歌于纽约举办的首届 MPC 峰会上亮相,它把一把私钥拆成若干碎片、分存在不同系统上,于是任何单次入侵都拿不到完整的钥匙。这一部分是实打实的安全。Alphabet 已经用它来保管自己持有的以太坊和 Solana,正式商用预计在 2027 年初,目标直指 Fireblocks 和 BitGo。

但把钥匙拆开并没有消除依赖,只是把依赖搬了个地方。碎片、签名的协同、以及那些机器,全都待在同一朵云里。你设计掉的故障,是黑客偷走钥匙;你设计进来的故障,是供应商拒绝签名:一次宕机、一道合规冻结、一个司法管辖区。单点故障,从你的攻击者挪到了你的供应商。

本该不需要任何可信第三方的货币,它的托管层正在向那些早已承载传统金融的超大云厂商集中。Alphabet 把自己的币放在自己的产品上保管,就是那个信号。

所以采用之前,先给这笔交易定价:你能不能把一个有决定权的碎片、或者签名的法定人数留在谷歌之外,并在不需要它配合的情况下迁走?如果不能,你只是把被盗风险换成了供应商风险。如果谷歌正式商用的条款允许机构把一个有决定权的碎片留在它的云之外、并低成本迁移,我们会修正这个判断。

研究,不构成投资建议。

Sources来源

  1. Source: siliconangle.com/2026/10/28/report-google-to-launch-secure-multi-pa…来源:siliconangle.com/2026/10/28/report-google-to-launch-secure-multi-pa…siliconangle.com ↗