Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a secret sharing scheme where the knowledge of just one share is sufficient to find the secret, in other words a (one-out-of-n) sharing scheme ? Plz I need to know if it is possible to make such operation with secter sharing

share|improve this question
I'm curious, could you give an example of when such a scheme would be of any practical use? – mikeazo Nov 1 '11 at 19:08

Just tell the whole secret to each person.

share|improve this answer
thank you for the answer, Let me ask the question another way, assume a group of participants (Pi) each one holds a secret Si, suppose that these secrets (Si) are the shares of a given secret "S" where S is not equal to Si and any participant is able to derive the secret S using just its share Si (without combining with secrets of other shares), is there a secret sharing scheme allowing that ? – Hamouid Nov 1 '11 at 18:49
Sure, tell each person the secret minus 1. (Your requirements are trivial to meet, and can be met by almost any algorithm, trivial or complex. Assuming you're not just joking, you must have requirements you're not stating. Rather than us going back and forth where you add requirements just to invalidate my solution, you should try to clearly state your actual requirements. It's not unusual for the hardest part of solving any crypto problem to be figuring out the actual requirements.) – David Schwartz Nov 1 '11 at 18:50
@DavidSchwartz I bet I know what you would say for $0$ out of $n$. – PyRulez Feb 13 at 20:31

Assuming each participant $i$ has a key-pair $(x_i,y_i)$ for an asymmetric encryption scheme (with $x_i$ being the private and $y_i$ the public key), you can divide your secret as

$$ S_i := \operatorname{Enc}(y_i, S).$$

Then each participant can retrieve the secret as

$$ S = \operatorname{Dec}(x_i, S_i).$$

Of course, simply giving each participant $S$ fulfills the same purpose.

share|improve this answer
this is a Good Idea – Hamouid Nov 1 '11 at 19:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.