• Decrypt if any of 5 keys are provided
• Decrypt if all of 5 keys are provided
• Decrypt if at least 3 of 5 keys are provided

• I want anyone on my team to be able to decrypt shared application runtime secrets with their own key locally, and have my deployments be able to decrypt the same secrets by fetching a decryption key from AWS KMS
• I want my team to be able to access a highly privileged secret in emergency situations, by having n/N team members provide their key

... many more

• Allows for managing secrets with complex rules
• Allows for secrets to be encrypted at rest, which means they can live on your Github, and you don't have to pay for a database or rely on an external service

import "github.com/adrianosela/multikey"

mkEncryptedSecret, err := multikey.Encrypt(plainTxtSecret, pubKeys, requireN)
checkErr(err)

plainTxtSecret, err := multikey.Decrypt(mkEncryptedSecret, privKeys)
checkErr(err)