keygen

Generates a new distributed key through three-party MPC and returns its keyId.

Produces a 2-of-3 threshold key: any two parties can later sign, and no single party learns the whole private key. The keyshare is persisted to the session's StorageClient; address it in later operations by the returned keyId.

Keygen reconciles the new share internally. If that final step is interrupted — a dropped connection or a crash — the share remains staged and reconcile completes it without repeating the MPC computation.

See also