%20(1).png)
Umbra recently integrated Turnkey Verifiable Cloud (TVC), Turnkey's platform for running sensitive workloads inside hardware-backed enclaves, to run the nodes that protect users' viewing keys for its privacy layer on Solana.
With TVC, Umbra enables private transactions while giving users the option to share their transaction history with auditors. Umbra lets developers build privacy-preserving applications while retaining the security, transparency, and control their users need.
The integration C4 brings together Umbra's privacy technology and Turnkey's verifiable infrastructure. By moving sensitive key operations into verifiable, isolated environments, Umbra can support private transfers, swaps, and withdrawals on Solana without exposing the underlying viewing keys to infrastructure operators.
Why private transactions on Solana need protected viewing keys
Umbra supports public and encrypted token accounts, along with private transactions powered by zero-knowledge proofs. Users can access their transaction history through a Master Viewing Key (MVK) and use selective disclosure to share it when needed.
To protect these keys, Umbra divides each user's viewing key into three encrypted pieces, called shards, and distributes them across three guardian nodes. Each Umbra guardian node processes its shard ,inside a secure enclave running on TVC, keeping the key material hidden from node operators.
Umbra's guardian nodes perform sensitive cryptographic operations offchain, while the protocol's records remain on Solana.
How Umbra's guardian nodes run in AWS Nitro Enclaves
Turnkey Verifiable Cloud runs Umbra's guardian nodes inside AWS Nitro Enclaves, isolated environments designed to protect sensitive data and operations.
When a guardian starts, it submits cryptographic proof, called an attestation, to Umbra's Solana programs. Umbra's Solana programs verify that the guardian is running an approved configuration before allowing it to join the network. This dually ensures each guardian is running the expected code and allows anyone to verify what code is running.
Turnkey also provides the infrastructure to run, connect, and scale these guardians. Turnkey Verifiable Cloud also keeps all sensitive keys protected inside the enclaves, even from Turnkey as the infrastructure host and from guardian node operators.
Umbra keeps control of upgrades
While Turnkey provides the confidential computing infrastructure, Umbra maintains control over its protocol and software updates.
Only Umbra's authorized developers can approve upgrades using security keys they control. Umbra's Solana programs also verify each guardian before it joins the network.
Umbra's control of upgrades means Turnkey can host the infrastructure without controlling Umbra's software or gaining access to users' sensitive key material.
Building privacy-preserving applications on Solana
By combining Umbra's privacy technology with Turnkey's confidential computing infrastructure, developers can support private transactions without exposing sensitive viewing keys to node operators.
Umbra is live today - TVC runs its guardian network, supporting private transfers, swaps, and withdrawals while allowing users to share transaction history when needed.
About Umbra
Umbra is a privacy layer for Solana that lets users shield tokens, make private transactions, and selectively share their transaction history.
About Turnkey
Turnkey provides programmable crypto infrastructure for embedded wallets, transaction automation, and confidential computing. Turnkey Verifiable Cloud enables developers to run sensitive workloads securely inside hardware-backed enclaves.
.png)