KeySplit Custody & Escrow

Shamir secret sharing, multi-party approval workflows, and HSM-ready policy for high-value keys.

Split ML-DSA and ML-KEM keys into n shares with t-of-n threshold reconstruction

m-of-n approval gates with custodian tracking and time-bounded unlock windows

Provision, unlock, rotate with deterministic audit events and recovery tracking

Pluggable storage backends with at-rest encryption and signed envelope support

Distribute root CA private keys across multiple custodians with no single point of compromise

Multi-party control for payment signing keys with regulatory compliance tracking

Classification-appropriate key escrow with separation of duties enforcement

Deterministic key reconstruction from distributed shares with complete audit trail