VEYRNOX

VEYRNOX · Shamir Wallet

The Shamir Secret Sharing wallet, explained in plain terms

Tier note: Shamir-sharded seed backup is part of Veyrnox Safety Plus ($5.99/mo). The Free plan uses hardware-bound signing via the Secure Enclave / StrongBox with an 8-digit PIN. See plans →

VEYRNOX is a Shamir Secret Sharing wallet — instead of one seed phrase you have to protect forever, your seed is mathematically split into pieces (shards) held in different places. No single shard reveals anything about the seed. You need a threshold of shards, working together, to sign.

What Shamir Secret Sharing is

Shamir Secret Sharing (SSS) is a 1979 cryptographic scheme by Adi Shamir. It splits a secret into N shards such that any K of them can reconstruct the secret, and any fewer than K reveal zero information. It is not "split the string into pieces" — it is a mathematical threshold scheme with a provable secrecy guarantee.

How VEYRNOX uses it

Math intuition — no single shard reveals anything

SSS is based on polynomial interpolation. Think of your secret as a single point on a curve. Each shard is a different point on the same curve. To draw the curve — and read the secret — you need at least K points. With K−1 points, infinitely many curves fit, so the secret is information-theoretically hidden.

Practical consequence: if an attacker steals only your device shard, they learn nothing about your seed. If they steal only your cloud shard, they learn nothing. They need both, plus your PIN and biometric, plus a device that passes RASP checks. This is defense in depth by construction.

What happens on device loss

  1. Install VEYRNOX on a new device.
  2. Sign in to your personal cloud (iCloud / Google Drive). Your cloud shard is available.
  3. A new device shard is provisioned inside the new device's Secure Enclave / StrongBox.
  4. Your PIN and biometric authorize reconstitution; keys are used for signing and immediately zeroized.

Your old device shard becomes useless without the cloud shard, which you now control from the new device.

FAQ

Is a Shamir wallet the same as a multisig wallet? No. Multisig requires multiple signatures on-chain (and pays gas for each). Shamir splits one key off-chain into shards that reassemble to sign once. Same address, one on-chain signature.

Can Veyrnox reconstruct my seed? No. We hold no shard. We physically cannot.

What if my cloud provider is subpoenaed? They can hand over your encrypted cloud shard. It is KEK-encrypted and useless alone.

Why not just use a seed phrase and a good backup? Because "a good backup" is exactly the moment attackers strike. Shamir removes the single-artifact failure mode.

Add AI Security Protection ($19.99/mo, coming soon)

Shamir Secret Sharing protects the wallet material itself — no single shard, no single point of loss. AI Security Protection — $19.99/mo, coming soon is the tier that protects the transactions the wallet signs. Ten shipped features layer on top of Shamir + Secure Enclave: Address Threat Screening (recipient addresses screened via the TIP edge function pre-sign), Phishing Site Detection (curated blocklist — not an ML classifier), Risk Scoring (nine-signal rule-based composite scorer, deterministic), Token Approval Review (per-spender ERC-20 and SPL allowances with risk notes and one-tap revoke), Approval Monitor (periodic background polling for new approvals and risky incoming transfers), AI Risk Notes (per-spender annotations from TIP), Personal AI Advisor (on-demand chat, advisory), Drainer Detection (local heuristic pattern-matching), Transaction Explanation, and Portfolio Q&A. See Plans & pricing for the full AI Security Protection tier — an AI Security add-on to the Veyrnox stack.

Related

Download VEYRNOX →