Hi all, I’m Vasily from Stakecraft.
We’ve built Rütli, an open-source (Apache-2.0), self-hosted threshold KMS for Canton node keys: GitHub - Stakecraft/rutli: Open-source, self-hosted threshold KMS (FROST-ed25519) for Canton Network and Splice node authority keys. A Canton KMS driver plus a t-of-n cosigner cluster: no single machine ever holds the key. · GitHub
- It plugs into an unmodified participant through the KMS Driver SPI, with no fork.
- The namespace and signing keys are FROST-ed25519 shares across a t-of-n cosigner cluster, so the whole key never exists on any machine.
- Encryption keys (ECIES P-256) are hosted in the same cluster, and the participant holds no private keys at all.
- It has multi-party approval, signing policies, proactive share refresh and recovery.
- An existing validator can be migrated in without changing its namespace or party IDs.
Status:
- a Splice 0.9.0 / Canton 3.6.1 DevNet validator has run on it since Oct 7;
- an internal security review is done;
- the external audit is the next step.
We’re preparing a Dev Fund proposal under RFP 26 (Key Management and Signing Controls). It funds:
- an independent audit with a public report;
- a Splice TestNet run and the 1.0 release;
- onboarding of independent validator operators.
We’re looking for a Champion from the Tech & Ops Committee, and we’d value any feedback from this SIG on scope. Happy to do a 20-minute walkthrough or a live demo. The draft proposal is ready to share.