39 lines
2.0 KiB
Markdown
39 lines
2.0 KiB
Markdown
|
# Software
|
||
|
|
This page outlines the software used for setting up a QKMS. All software used in
|
||
|
|
the setup is open source and audited by security firms in order to ensure their
|
||
|
|
security. Furthermore, all software is built in a deterministic manner and
|
||
|
|
reproduced by multiple individuals on diverse hardware to minimize the risks
|
||
|
|
associated with supply chain attacks.
|
||
|
|
|
||
|
|
To achieve this, [StageX](https://codeberg.org/stagex/stagex)
|
||
|
|
is used - a toolchain for building software using a fully bootstrapped compiler,
|
||
|
|
which itself is built deterministically, and multi-reproduced.
|
||
|
|
## [AirgapOS](https://git.distrust.co/public/airgap)
|
||
|
|
|
||
|
|
AirgapOS is an operating system built for those that want to be -really- sure
|
||
|
|
that sensitive cryptographic material is managed in a clean environment with an
|
||
|
|
"air gap" between the machine and the internet with high integrity on the supply
|
||
|
|
chain of the firmware and OS used. This OS is hardened and specifically designed
|
||
|
|
as an appliance for working with cryptographic material.
|
||
|
|
|
||
|
|
The software was developed by [Distrust](https://distrust.co) and has undergone
|
||
|
|
an [audit](https://git.distrust.co/public/airgap/src/branch/main/audits) by
|
||
|
|
Cure53 with no significant vulnerabilities found and has since then undergone
|
||
|
|
additional hardening.
|
||
|
|
|
||
|
|
The [AirgapOS Setup](repeat-use-airgapos.md) guides the user through verifying and
|
||
|
|
setting up AirgapOS on a bootable disk to use as part of the [Key Derivation
|
||
|
|
Ceremony](glossary.md#key-derivation-ceremony)
|
||
|
|
|
||
|
|
## [Keyfork](https://git.distrust.co/public/keyfork)
|
||
|
|
|
||
|
|
Keyfork is an opinionated and modular toolchain for generating and managing a
|
||
|
|
wide range of cryptographic keys offline and on Smart Cards from a shared
|
||
|
|
BIP-0039 mnemonic phrase. BIP-0039 phrases are used to calculate a BIP-0032
|
||
|
|
seed, which is used for hierarchical deterministic key derivation.
|
||
|
|
|
||
|
|
This software is the backbone for all cryptographic actions performed as part
|
||
|
|
of QKMS. It was developed by [Distrust](https://distrust.co) and is included
|
||
|
|
with AirgapOS and has been audited by two firms, NCC and Cure53 with no
|
||
|
|
significant vulnerabilities found.
|