diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0203e3e..468fa45 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,14 @@
+# Keyfork v0.3.2
+
+This is another bugfix release, allowing the derivation of Shard keys.
+
+
+### Changes in keyfork:
+
+```
+6ffcdc3 add derivation path for Shard keys
+```
+
 # Keyfork v0.3.1
 
 This is a bugfix release, resolving an issue with Keyfork Shard not having a
diff --git a/Cargo.lock b/Cargo.lock
index 6a1aac6..cd3195b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1797,7 +1797,7 @@ dependencies = [
 
 [[package]]
 name = "keyfork"
-version = "0.3.0"
+version = "0.3.2"
 dependencies = [
  "base64",
  "card-backend-pcsc",
@@ -1967,7 +1967,7 @@ dependencies = [
 
 [[package]]
 name = "keyfork-shard"
-version = "0.3.2"
+version = "0.3.3"
 dependencies = [
  "aes-gcm",
  "anyhow",
diff --git a/crates/keyfork/Cargo.toml b/crates/keyfork/Cargo.toml
index 69306dd..f2640aa 100644
--- a/crates/keyfork/Cargo.toml
+++ b/crates/keyfork/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "keyfork"
-version = "0.3.1"
+version = "0.3.2"
 edition = "2021"
 license = "AGPL-3.0-only"
 
diff --git a/crates/keyfork/src/cli/derive.rs b/crates/keyfork/src/cli/derive.rs
index 92e1c21..329ad16 100644
--- a/crates/keyfork/src/cli/derive.rs
+++ b/crates/keyfork/src/cli/derive.rs
@@ -58,6 +58,9 @@ pub enum Path {
 
     /// The Disaster Recovery index.
     DisasterRecovery,
+
+    /// The Shard index.
+    Shard,
 }
 
 impl std::fmt::Display for Path {
@@ -71,6 +74,7 @@ impl Path {
         match self {
             Path::Default => "default",
             Path::DisasterRecovery => "disaster-recovery",
+            Path::Shard => "shard",
         }
     }
 
@@ -78,6 +82,7 @@ impl Path {
         match self {
             Self::Default => paths::OPENPGP.clone(),
             Self::DisasterRecovery => paths::OPENPGP_DISASTER_RECOVERY.clone(),
+            Self::Shard => paths::OPENPGP_SHARD.clone(),
         }
     }
 }