search

pcrockett / kin-backup

Secure, simple backups for your next of kin
MIT License
3 stars 0 forks source link

Consider requiring a minimum number of passwords to decrypt #11

Open pcrockett opened 5 years ago

pcrockett commented 5 years ago

Under the current scheme, only two backups need to be compromised for someone to gain access to the encrypted data. We could require 3 or more people to collaborate to decrypt a backup. This would be useful for paranoid people backing up PGP keys, for example.

Consider using something like Shamir's Secret Sharing. Not sure if there are any well-tested libraries for that. Or perhaps simply use multiple layers of encryption for the master key....

pcrockett commented 5 years ago

This one looks halfway decent (from the readme at least...): https://github.com/dsprenkels/sss

No idea how much we should trust that library, but it does have Rust bindings, which is nice.