[FDE] administrative recovery

[coderman]

On 4/24/07, dan at geer.org <dan at geer.org> wrote:
> ...
> So far as I know, no recovery mechanism uses threshhold
> cryptography ("split-key"), but I'd be intrigued if any
> did.

there are a number of high end FDE solutions that do this, usually
under the name "Quorum Key Recovery".

as an example, Decru DataFort [0] provides a quorum (M of N) "Recovery
Officers" with SmartCards the ability to recover / re-key as needed.

best regards,


0.  Decru Lifetime Key Management
   http://www.decru.com/products/lkm_software.htm