Abstract: A method for restoring a distributed secret key from a backup storage such that an original secret key is generated and distributed among two or more servers. A first server creates a backup containing at least the share of the original secret key which is held by the first server. The servers refresh the original secret key at least once. During each refresh the servers generate a refreshed distributed secret key and a distributed difference between the previous secret key and the refreshed secret key. The first server restores its share of the original secret key from the backup and requests the accumulated secret version of its share of the difference from the other servers and restores its share of the latest refreshed secret key from the received accumulated secret version and the restored share of the original secret key.