Security

Security is not a feature; it is the foundation of Planbok. Our architecture is designed to assume compromise and mitigate impact through defense-in-depth strategies.

Cryptographic Primitives

We utilize ECDSA (secp256k1) and EdDSA (Ed25519) threshold signature schemes, with a 2-of-2 distributed key generation built on Feldman verifiable secret sharing.

Infrastructure Security

• Network Isolation: Service-to-service traffic is encrypted and mutually authenticated with TLS. Nodes accept traffic only from the services that must reach them.
• Share Separation: Each node holds one share. Signing requires both nodes, so one compromised node cannot sign alone.
• Encrypted Key Material: Key material is encrypted at rest. Key shares are split across independent nodes and wrapped so that a single storage system cannot open them alone.

Compliance

Every operation is recorded in an immutable audit trail, and Role-Based Access Control limits who can act on your organization.