Public Report – Keyfork Implementation Review

In April 2024 Distrust engaged NCC Group to perform a cryptographic security assessment of keyfork v0.1.0, an offline and smartcard-capable key management tool that supports Shamir Secret Sharing and share import/export via mnemonics/QR codes; several low-impact findings and engagement notes were identified and promptly fixed, with a May 2024 retest marking all issues as resolved. The review intentionally omitted detailed analysis of memory zeroization and timing attacks due to assumptions about trusted hardware and environment.