Confium Threshold

Eliminate single points of failure in your signing infrastructure.

Security EngineersDevSecOpsPlatform Engineers

Installation options

Pick the install path that matches your deployment. Confium Confium Threshold is available as a Rust crate, a Docker image, a language-specific package, or a hosted service depending on surface.

Rust crate

For application embedding.

cargo add confium-threshold

Or pin specific schemes via features: confium-threshold = { version = "0.4", features = ["cmp20", "frost-p256"] }

CLI

cargo install --locked confium-cli

Docker (signerd)

For production signing service.

docker pull confium/signerd:latest
docker run -d \
  -p 7000:7000 \
  -v ./shares:/etc/confium/shares:ro \
  -v ./signerd.toml:/etc/confium/signerd.toml:ro \
  confium/signerd:latest

Kubernetes operator

For declarative share management.

kubectl apply -f https://confium.org/operator.yaml
kubectl apply -f - <<EOF
apiVersion: confium.org/v1
kind: ThresholdKey
metadata:
  name: my-key
spec:
  threshold: 2
  parties: 3
  scheme: cmp20
EOF

Ruby gem

gem install confium

Python

pip install confium