What is SecureWing?

TLDR: SecureWing Stack

SecureWing is Canary's proprietary security and verification infrastructure stack, purpose-built for both the Canary DVN and the Nest Oracle. Leveraging advanced TEEs like AWS Nitro, Intel SGX, and AMD SEV, SecureWing ensures verifiable, tamper-proof execution of oracle logic.

Key components include:

  • TEE (Secure Enclaves): Hardware-level security isolates execution, ensuring only validated and audited code runs, preventing external manipulation.

  • SSL Pinning: Locks down communication channels exclusively to pre-approved institutional data sources, eliminating vulnerabilities such as man-in-the-middle attacks.

  • Hardware Security Modules (HSM): Securely store and manage cryptographic keys, safeguarding against key compromise and unauthorised access.

  • K-of-N Adaptive Consensus: Requires a quorum of multiple TEE-backed nodes to independently verify data accuracy, ensuring fault tolerance and preventing malicious or faulty node behaviour.

  • Cryptographic Attestation: Every data feed includes verifiable cryptographic proofs confirming the integrity, source, and authenticity of the data directly on-chain.

The SecureWing stack provides a flexible yet robust security backbone capable of supporting diverse institutional use cases, including real-world asset tokenisation, secure cross-chain messaging, regulatory-compliant financial applications, and verifiable oracle data delivery, all with cryptographic certainty.

Last updated