macOS
Homebrewverified · 100%
brew install sss-clilocal Homebrew formula metadata
brew / rank 11606
Install sss-cli with Homebrew, Nix
Shamir secret share command-line interface. Version 0.1.1 via Homebrew; verified from local package data. Also installable with nix: nix profile install nixpkgs#sss-cli.
install
Additional install commands
Linux
Nixverified · 92%
nix profile install nixpkgs#sss-clinixpkgs package indexes · pkgs/by-name/ss/sss-cli/package.nix · source: api.github.com
overview
Package summary
Shamir secret share command-line interface
Project links
Commands and aliases
- secret-share-combine
- secret-share-split
history
Project history and usage
sss-cli is a small Rust command-line wrapper around David Sprenkels's SSS library. Its two executables split a secret into Shamir shares and recombine a threshold number of shares.
Project history
The official GitHub repository was created in 2017. The project packages the author's secure Shamir secret-sharing implementation as the `secret-share-split` and `secret-share-combine` commands.
The 0.1.2 change documented in the README moved the cryptographic wrapper to RustCrypto's `crypto-secretbox` crate. The tool adds authenticated encryption so tampered shares are detected when a secret is reconstructed.
Adoption history
Upstream originally documented installation from a Git branch with Cargo and from a third-party Homebrew tap. The supplied package metadata records later availability in Homebrew and Nix, giving the focused Rust utility conventional Unix package-manager distribution.
How it is used
Users pipe a secret into `secret-share-split`, select the number of shares and reconstruction threshold, store each output line separately, and later pipe enough shares into `secret-share-combine`. The commands are stream-oriented and therefore fit shell pipelines without a project configuration file.
Why package nerds care
sss-cli is a compact example of packaging a cryptographic primitive as composable Unix filters. It is notable for exposing secret splitting without a service, account, or credentials store and for distributing the same Rust code through Cargo and system package managers.
Timeline
- 2017: The official sss-cli GitHub repository was created.
- 2020s: The project became available through Homebrew and Nix in addition to Cargo-based installation.
Related projects
- The upstream `dsprenkels/sss` library supplies the Shamir secret-sharing implementation wrapped by sss-cli; RustCrypto's `crypto-secretbox` supplies the authenticated-encryption primitive noted in the changelog.
Sources
- https://github.com/dsprenkels/sss-cli
- https://github.com/dsprenkels/sss-cli#readme
- source_facts.package-manager
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 1 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
secret-share-combine | cli | global executable | |
secret-share-split | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-04
manager version0.1.1
manager updated
local dataok
upstreamcurrent
latest detectedv0.1.1
https://github.com/dsprenkels/sss-cli
- infoNo package-manager update timestamp was available.low confidence
install metadata
Package metadata
| Package key | brew:sss-cli |
|---|---|
| Version | 0.1.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/sss-cli |
| Homepage | https://github.com/dsprenkels/sss-cli |
| Repository | https://github.com/dsprenkels/sss-cli |
| License | MIT |
| Source archive | https://github.com/dsprenkels/sss-cli/archive/refs/tags/v0.1.1.tar.gz |
| Build dependencies | rust |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | sss-cli |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
sss-cli
nix profile install nixpkgs#sss-cli- normalized package name match
- Matched by: Sss Cli
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation