How is the initial key generation handled?

Hi! I’m trying to better understand how a new user’s private key is generated and split up. Is there ever a time where the full key exists in a single place? Is there some documentation you can point me towards that explains how this is handled?

I have already read this: Nodes and DKG | Documentation | Web3Auth. But this seems to relate only to the web3auth network’s key share and seems to only deal with shallow MPC from the old SSS method? Was this updated with the move to TSS? Or am I missing something?

Thanks!

@d3baca Your request has been forwarded to our team and we will get back with further updates.

With Web3Auth, the full key is never present in a single place ever. It can be exported in the frontend, if the user needs it, otherwise not.

I think we’re already discussing something very similar in Understanding The MPC Architecture

Feel free to open up a new thread in case you have other particular questions.