Re:How to Share a Secret [pdf] (1979)
by jon-wood on Wednesday June 22, 2022 @09:55AM
(#31836007)
Hashicorp Vault by default makes use of this mechanism to ensure certain actions (most notably starting Vault and unlocking the secret store for use) require multiple users to approve it.
[ Parent
| on HN ]
Thanks. Going through the docs now.
https://www.vaultproject.io/docs/concepts/seal#shamir-seals
Shamir seals
The default Vault config uses a Shamir seal. Instead of distributing the unseal key as a single key to an operator, Vault uses an algorithm known as Shamir's Secret Sharing to split the key into shards.