• Badabinski
    link
    fedilink
    5
    edit-2
    1 year ago

    I always thought this was such a cool concept when I was administrating a Hashicorp Vault server. I made 7 fragments for 7 keyholders, and required that 4 or 5 of them (can’t remember) enter their fragments to unlock the Vault server.

      • DaGeek247
        link
        fedilink
        121 year ago

        From the git repo;

        Q) How does this work?
        A) This uses the Shamir Secret Sharing Scheme to break an encryption key into parts that can be recombined to create the original key, but only requiring a certain threshold to do so. I’ve adapted Hashicorp’s implementation from their vault repo