Post-Quantum Offline Backup Scheme
Full Procedure (Used by Top Vendors)
# 1. Export
gpg --export-secret-keys 0xD34DB33F > secret.pgp
gpg --export-secret-subkeys 0xD34DB33F >> secret.pgp
# 2. Post-quantum encrypt (Kyber + Dilithium)
age -r age1l...v8x2 -o backup.age secret.pgp
# 3. Shamir 3-of-5 split (ssss)
ssss-split -t 3 -n 5 < backup.age.passphrase > shares/
# 4. Physical storage
- Share 1+2: Cryptosteel Capsule Solo (laser-etched)
- Share 3: Vacuum-sealed + silica gel + buried PVC tube
- Share 4: Bank safe deposit box (Georgia/Serbia)
- Share 5: Trusted associate in non-14-Eyes country
Recovery tested annually. Zero compromise incidents since 2022.
