Generating New Master Key Shares in Vault

Vault makes use of Shamir's secret sharing scheme to split a master key into n pieces, requiring at least k of them to be presented at 'unseal' time. At initialisation time, the user specifies what values n and k should take. Vault does not make it possible to change the number of shares after initialisation … Continue reading Generating New Master Key Shares in Vault

Advertisements