2.3 KiB
Software
This page outlines the software used for setting up QKM.
[Stageˣ]
All software is built in a deterministic manner and reproduced by multiple individuals on diverse hardware to minimize the risks associated with supply chain attacks.
To achieve this, [Stageˣ] is used - a toolchain for building software using a fully bootstrapped compiler, which itself is built deterministically, and multi-reproduced.
[Stageˣ] was designed and developed by Distrust, with generous sponsorship from Keyternal and Mysten Labs.
AirgapOS
AirgapOS is an operating system built for those that want to be -really- sure that sensitive cryptographic material is managed in a clean environment with an "air gap" between the machine and the internet with high integrity on the supply chain of the firmware and OS used. This OS is hardened and specifically designed as an appliance for working with cryptographic material.
The software was developed by Distrust and has undergone an audit by Cure53 with no significant vulnerabilities found and has since then undergone additional hardening.
The AirgapOS Setup guides the user through verifying and setting up AirgapOS on a bootable disk to use as part of the Key Derivation Ceremony
Keyfork
Keyfork is an opinionated and modular toolchain for generating and managing a wide range of cryptographic keys offline and on Smart Cards from a shared BIP-0039 mnemonic phrase. BIP-0039 phrases are used to calculate a BIP-0032 seed, which is used for hierarchical deterministic key derivation.
This software is the backbone for all cryptographic actions performed as part of QKM. It was developed by Distrust and is included with AirgapOS and has been audited by two firms, NCC and Cure53 with no significant vulnerabilities found.
Icepick
Icepick is a framework for rapidly developing applications to perform transfer and staking cryptocurrency operations. It works synergistically with keyfork which derives keys which are then used by icepick.