> For the complete documentation index, see [llms.txt](https://learn.cypherock.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://learn.cypherock.com/design-decision/conflict-between-trusted-parties-should-not-result-in-unauthorized-access.md).

# Conflict between trusted parties should not result in unauthorized access

{% tabs %}
{% tab title="Cypherock X1" %}
To prevent losses due to the conflict of trusted parties (guardians) that might be having access to the threshold number of X1 Cards (2 or more), Cypherock uses PIN protection on top of X1 Cards to securely store the cryptographic parts. The X1 cards uses the same secure hardware that is used to develop debit cards and credit cards for the banking industry.

Brute forcing an X1 Card is prevented using a time exponential algorithm which limits the subsequent access of the cryptographic part. The X1 Cards have an EAL6+ security rating. The **Evaluation Assurance Level (EAL1** through **EAL7)** of an IT product or system is a numerical grade assigned following the completion of a Common Criteria security evaluation, an international standard in effect since 1999.
{% endtab %}

{% tab title="Cypherock X0" %}
To prevent losses due to a conflict between people who might have access to the threshold number of X0 Cards (2 or more), every wallet on Cypherock X0 is protected by a PIN. The shards stored on the X0 Cards are encrypted with a key derived from this PIN, so holding the cards alone is never enough to access the wallet. The X0 Cards use EAL6+ certified secure elements, the same class of secure hardware used to develop debit cards and credit cards for the banking industry.

Brute forcing an X0 Card is prevented by CyLock. After repeated wrong PIN attempts, every further attempt is only possible after a security wait that grows longer each time, and repeated wrong attempts eventually lock the wallet permanently. The **Evaluation Assurance Level (EAL1** through **EAL7)** of an IT product or system is a numerical grade assigned following the completion of a Common Criteria security evaluation, an international standard in effect since 1999.
{% endtab %}
{% endtabs %}