Secure key creation

A computer program product for secure key creation, the computer program product comprising:

• a non-transitory computer readable medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method, comprising:
• creating a token;
• populating a key control information section of the token with a key part counter value to indicate a minimum number of key parts from separate users that are required to form a key, wherein each key part is controlled by a respective separate user, each key part is necessary to complete the key, and the information in an individual key part cannot be used to determine any part of a complete key;
• populating a payload section of the token with a first key part from a first user;
• binding the key control information section to the payload section of the token;
• adding a second key part from a second user, the second user being distinct from the first user, to the first key part and incrementing or decrementing the key part counter value based on the addition of the second key part to the first key part;
• binding the key control information section to the payload section of the token after the second key part has been added to the key;
• and
• indicating the key is complete based on the incremented or decremented key part counter value in the token, wherein the completed key comprises a combination of the first and second key parts.