Shamir Secret Sharing Key Generation

Shamir Secret Sharing Key Generation on Secure Elements

The Problem: Seed Phrases Are the Weakest Link in Crypto Self-Custody

Every conventional crypto hardware wallet forces users to write down a 12–24 word mnemonic seed phrase on paper during setup 
The seed phrase is the master key to all cryptocurrency assets stored on the device If it’s stolen, photographed, or discovered by an attacker, every asset is lost If the paper is destroyed by fire, water, or simple misplacement, recovery becomes impossible 
The seed phrase represents the single greatest vulnerability in private key storage for cryptocurrency — a problem that persists across every major cold wallet and cold storage wallet on the market today

The Innovation: Key Generation Meets Shamir Secret Sharing Inside the Secure Element

Cryptnox’s patented method eliminates seed phrase handling entirely by combining two powerful cryptographic concepts inside a tamper-resistant CC EAL6+ secure element chip 
First, the cryptographic private key is generated directly within the secure element of an NFC smart card — never on a phone, computer, or any device where it could be intercepted 
Second, the key is immediately split into multiple shares using Shamir’s (k, n) threshold secret sharing scheme, a proven cryptographic protocol that ensures any k of n shares can reconstruct the original key, but fewer than k shares reveal absolutely nothing about it

These shares are then distributed to separate secure elements in additional Cryptnox cards via encrypted NFC channels 
The critical architectural constraint that defines this patent: the full private key never exists in cleartext outside a secure element at any point during generation, splitting, distribution, or reconstruction This is a fundamentally different approach from any other hardware wallet, cold wallet, or cold storage solution available today

How It Works

The process begins when a user taps their primary Cryptnox card to a mobile device The secure element chip embedded in the card generates a fresh elliptic curve keypair internally Rather than deriving this key from a mnemonic that the user must record, the key is created using the secure element’s certified random number generator — providing true entropy at the hardware level

Immediately after generation, the secure element applies Shamir’s Secret Sharing algorithm to split the private key into multiple shares A secure communication channel is then established between the primary card and one or more backup cards through mutual authentication and encrypted NFC communication Each backup card’s secure element receives its share through this protected channel, stores it non-extractably, and confirms receipt At no point does the assembled private key leave any secure element in an unencrypted state

To reconstruct the key — for example, when recovering access after a lost card — the threshold number of cards are tapped in sequence Each secure element releases its share through an authenticated encrypted channel, and the original key is reassembled inside the target secure element The reconstruction process maintains the same zero-exposure guarantee as the original generation

Why This Matters for Crypto Security

This patent establishes Cryptnox as the first hardware wallet to combine Shamir’s Secret Sharing with on-card secure element execution in a smart card form factor The implications for cryptocurrency security are significant: there is no seed phrase to steal, lose, or mishandle There is no single point of failure — losing one card does not compromise the key The threshold scheme means an attacker would need to compromise multiple physically separate secure elements simultaneously, a dramatically harder attack than stealing a piece of paper

For users seeking the strongest private key storage for their cryptocurrency, this patented technology represents a fundamental advancement over the seed-phrase-dependent approach used by every competing crypto hardware wallet, including Ledger, Trezor, and Tangem