1
$\begingroup$

Consider a protocol $\pi$ which uses a linear secret sharing scheme like that of Shamir secret sharing. Further assume that the protocol $\pi$ has been proven to be secure (correctness and privacy) under the semi-honest adversarial model. If we replace the secret sharing scheme with a verifiable secret sharing scheme, will the protocol $\pi$ then be secure even under the malicious adversarial model? That is, can we say that the robustness of $\pi$ is implicit? If yes, please provide a reference. If no, please help me understand as to in which cases will the above not be true.

Improve this question
$\endgroup$
2
  • 2
    $\begingroup$ Not necessarily (though it certainly can be). ​ No. ​ This is a "just do it" construction, like these two. ​ ​ ​ ​ $\endgroup$
    – user991
    Commented Apr 24, 2016 at 13:17
  • $\begingroup$ @RickyDemer Why didn't you post this as an answer? $\endgroup$
    – Daisetsu
    Commented Apr 25, 2016 at 6:41

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.