Fractum: an open-source CLI for Threshold-Based Cold Storage of Critical Secrets

Comments, chapters, ... Slides Transcript Search
Loading Click here to add:
Subscribe to notifications

When subscribed to notifications, an email will be sent to you for all added annotations.

Your user account has no email address.

Information on this media

0 views

Shamir's Secret Sharing (SSS) has been trusted for decades by organizations like ICANN (DNSSEC root key ceremonies), Banks, Coinbase, Defense industry ; yet it remains largely inaccessible to individual practitioners and small teams who need cold storage for cryptocurrency wallets, SSH keys, infra recovery keys, or root CA credentials. Between "encrypt it and pray you never lose the key" and a $50K HSM deployment there is a missing category: how do you back up the one secret that protects everything else, for years, with no single point of failure and no network? This talk introduces Fractum, offline, FOSS command-line tool that encrypts a file with AES-256-GCM and splits the key, not the file, using Shamir's Secret Sharing, so any K of N shares recover it and fewer than K reveal nothing. Attendees will take away: a clear mental model of how threshold cryptography works in practice, an understanding of the security properties (and honest limitations) of implementing SSS in Python, and a free tool they can use immediately for their own cold storage needs. GitHub: https://github.com/katvio/fractum

Creation date: July 2, 2026
Speakers: Cédric
Company: Katvio
License: CC BY-SA v4
Links:

Other media in the channel "2026"