I know there are many AES MPC implementations, but in general, is it possible to restore the raw AES key if we have access to all of the nodes? If we take, for example, VIFF and its "shares". Is it difficult?
1 Answer
$\begingroup$
$\endgroup$
5
If you have the values of all nodes you can always easily recover the plaintext in MPC.
-
2$\begingroup$ Indeed, if this were not the case, then you could implement white-box cryptography by implementing all the nodes on a multiparty MPC implementation on the same device... $\endgroup$– ponchoCommented Mar 14, 2017 at 18:42
-
$\begingroup$ I have to tell the whitebox guys they'll love this idea. $\endgroup$– EliasCommented Mar 14, 2017 at 18:45
-
$\begingroup$ Indeed; it would be a lot simpler than what they're doing now... $\endgroup$– ponchoCommented Mar 14, 2017 at 18:48
-
-
$\begingroup$ @Johndow Doesn't really matter. Whatever was protected by splitting it between the different parties is available if you combine the data from all the parties. $\endgroup$– EliasCommented Mar 14, 2017 at 22:13