GoKawiilOxide details key-hierarchy design for securing rack-level storage
Oxide Computer's engineering team published a technical explainer on how it structures cryptographic keys within its trust quorum system, describing how a rack secret reconstructed from K key shares is used to derive and protect all subsequent keys used after rack unlock. The piece compares key derivation and key wrapping as two complementary mechanisms for propagating that trust down the key hierarchy, each with different tradeoffs for storage and rotation.