CleverWild 8566a73e71 feat(server): introduce VaultCoordinator for multi-operator Shamir bootstrap/unseal ...

VaultCoordinator collects operator passphrases, splits the seal key into
Shamir shares on bootstrap (encrypting each share with the operator's
passphrase via Argon2 + XChaCha20-Poly1305), and reconstructs the seal
key from threshold shares on unseal. Adds vsss-rs 5.4.0 and rand_core 0.6
dependencies.

2026-08-25 14:43:16 +02:00

1.7 KiB

Raw Blame History

View Raw