Skip to content

Commit 4804eeb

Browse files
authored
Update backup-and-recover.md
1 parent 482f615 commit 4804eeb

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

docs/security/backup-and-recover.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,9 @@ To assist with the recovery process, a designated set of Recovery Party members
1515
Each encrypted backup is further protected using a Blinder, a symmetric encryption key held by each node operator. This additional layer ensures that even if the Recovery Party is compromised, the backups cannot be decrypted without participation from the nodes themselves. During recovery, after the Recovery Party has met quorum and produced the necessary decryption shares, each node operator applies their Blinder to fully decrypt the backup.
1616

1717
This two-step safeguard ensures that:
18-
The Recovery Party alone cannot decrypt the root key shares.
19-
The Lit nodes alone cannot decrypt the backups without the Recovery Party’s participation.
20-
Only with cooperation from both groups—Recovery Party quorum and node-held Blinders—can the encrypted backups be fully decrypted.
18+
- The Recovery Party alone cannot decrypt the root key shares.
19+
- The Lit nodes alone cannot decrypt the backups without the Recovery Party’s participation.
20+
- Only with cooperation from both groups—Recovery Party quorum and node-held Blinders—can the encrypted backups be fully decrypted.
2121

2222
This mechanism preserves the system’s threshold security guarantees, even in the context of sensitive operations like key recovery.
2323

0 commit comments

Comments
 (0)