HSM Replacement

Replace a single-key HSM with T-of-N distributed signing. No single party can sign alone; compromising T-1 parties does not compromise the key.

Implemented by

Eliminate single points of failure in your signing infrastructure.

→ Product overview

Eliminate single points of failure in enterprise signing.

→ Audience overview

Run a CA without a single trusted key.

→ Audience overview

1. Read the relevant product overview

Start with the product pages above for the architectural model.
2. Run the quickstart

Each product page has a 5-minute quickstart that runs locally.
3. Read the spec

Specs at /specs/PRODUCTS cover the protocol details.
4. Talk to us

Open a Discussion on GitHub tagged `evaluation-help`.

Operate a certificate authority where the root key is split across multiple parties. Issue certifies requires T-of-N quorum.

Run Herzberg share refresh on a schedule so that compromising the same T parties over time still does not reveal the key.

Operate a national or industry PKI where the root of trust is held by a quorum of institutional parties rather than a single operator.

Sign build artifacts at release time using threshold keys held outside CI. Compromising CI does not compromise the signing key.