4 ms·
What do you mean by x person key system, multiple parties are requested to auth to grant access, something like shamirs secret sharing?
by ses1984 7y ago
What do you mean by x person key system, multiple parties are requested to auth to grant access, something like shamirs secret sharing?
- toomuchtodo 7y agoThat’s the underlying primitive, yes.
- ses1984 7y agoDo you mean multiple people required to get a single totp code or multiple people authorized to get a single totp code?
- toomuchtodo 7y agoThe former. Think of it as 3FA. Something you know, something you have, and multiple people who need to grant access to that thing you have.
- ses1984 7y agoSure you can bake 3fa into your applcation. Hashicorp vault has something like this to generate a root token. You can split your unseal key according to shamirs secret sharing. You can bring together a specified number of unseal key shards and generate a new root token with them. The app had endpoints to manage all this. You could create your own app with your own endpoints with similar functionality. I don't think there are cryptographic primitives to give you this easily, without some trust logic baked into the app layer.