What it does
AERKey is a threshold ECDSA implementation that splits every signing key across multiple parties running inside Trusted Execution Environments, on three different cloud providers, in three different geographic regions. To produce a signature, a threshold of parties — never all of them, never any one alone — must collaborate. The private key as a single object never exists in memory anywhere, ever, including at the moment of signing.
Why it matters
This is the foundation of the chain's "zero human validators" property. Every block on AEREDIUM is signed by a threshold of TEE-attested signers — not by a person, not by a multi-sig of people, not by a stake-weighted validator who could be coerced. The signing authority is mathematically distributed across hardware-attested code running in mutually-distrusting clouds. To compromise a block signature, an attacker would need to simultaneously compromise hardware attestation across multiple independent cloud providers — a coordinated multi-jurisdictional attack that is not a realistic adversary model.