Expand description
Threshold crypto deployment patterns.
Two patterns inspired by Thunderbird’s revocation escrow and key backup designs, generalized to T-of-N threshold cryptography:
- Escrow: A user’s key is encrypted to a threshold public key; recovery requires T-of-N custodians to participate in an async decryption ceremony.
- Revocation service: Threshold-backed revocation service replacing single-party authorization (eliminates compelled-revocation risk).
See TODO.roadmap/41-thunderbird-patterns-integration.md for full spec.
Modules§
- escrow
- Threshold key escrow.
- revocation
- Threshold-backed revocation service.