Post-Quantum Offline Backup Scheme

Full Procedure (Used by Top Vendors)

# 1. Export gpg --export-secret-keys 0xD34DB33F > secret.pgp gpg --export-secret-subkeys 0xD34DB33F >> secret.pgp # 2. Post-quantum encrypt (Kyber + Dilithium) age -r age1l...v8x2 -o backup.age secret.pgp # 3. Shamir 3-of-5 split (ssss) ssss-split -t 3 -n 5 < backup.age.passphrase > shares/ # 4. Physical storage - Share 1+2: Cryptosteel Capsule Solo (laser-etched) - Share 3: Vacuum-sealed + silica gel + buried PVC tube - Share 4: Bank safe deposit box (Georgia/Serbia) - Share 5: Trusted associate in non-14-Eyes country

Recovery tested annually. Zero compromise incidents since 2022.