CleverWild 6f65c907a3 feat(server): introduce VaultCoordinator for multi-operator Shamir bootstrap/unseal ...

VaultCoordinator collects operator passphrases, splits the seal key into
Shamir shares on bootstrap (encrypting each share with the operator's
passphrase via Argon2 + XChaCha20-Poly1305), and reconstructs the seal
key from threshold shares on unseal. Adds vsss-rs 5.4.0 and rand_core 0.6
dependencies.

2026-06-12 19:43:09 +02:00

5.0 KiB

Raw Blame History

View Raw