Policy Enforcement

Define attribute-based policies that signing sessions must satisfy (geography, role, time-of-day).

Implemented by

Eliminate single points of failure in your signing infrastructure.

→ Product overview

Run a CA without a single trusted key.

→ Product overview

Eliminate single points of failure in enterprise signing.

→ Audience overview

Deploy, monitor, and operate threshold signing infrastructure.

→ Audience overview

1. Read the relevant product overview

Start with the product pages above for the architectural model.
2. Run the quickstart

Each product page has a 5-minute quickstart that runs locally.
3. Read the spec

Specs at /specs/PRODUCTS cover the protocol details.
4. Talk to us

Open a Discussion on GitHub tagged `evaluation-help`.

Replace a single-key HSM with T-of-N distributed signing. No single party can sign alone; compromising T-1 parties does not compromise the key.

Operate a certificate authority where the root key is split across multiple parties. Issue certifies requires T-of-N quorum.

Run Herzberg share refresh on a schedule so that compromising the same T parties over time still does not reveal the key.

Operate a national or industry PKI where the root of trust is held by a quorum of institutional parties rather than a single operator.