CleverWild 83075e9df7 feat(server): introduce VaultCoordinator for multi-operator Shamir bootstrap/unseal ...

VaultCoordinator collects operator passphrases, splits the seal key into
Shamir shares on bootstrap (encrypting each share with the operator's
passphrase via Argon2 + XChaCha20-Poly1305), and reconstructs the seal
key from threshold shares on unseal. Adds vsss-rs 5.4.0 and rand_core 0.6
dependencies.

2026-08-26 13:01:44 +02:00

5.0 KiB

Raw Blame History

View Raw