# post-quantum threshold secret sharing

I am looking for a references for post-quantum threshold secret sharing schemes.

I am especially interested in knowing whether any one based on one-way compressor functions or cryptographic hashes exist.

The trivial secret sharing systems with $t=1$ and $t=n$ give information-theoretic security.

Here are some other alternatives that I don't know the security of:

• Shamir's secret sharing - I don't know [Update: gives information-theoretic security]
• Blakley's scheme - I don't know
• The Chinese Remainder Theorem - It seems like it is a problem a quantum computer would easily solve.
• What research have you already done? I personally am not a fan of existance questions though I don't think the site as completely resolved the issue. That said we do expect you to do some of your own research, etc. Tell us what you have found so far and why it doesn't meet your needs, etc. Oct 9, 2013 at 13:49
• If by threshold secret sharing, you mean something like Shamir's secret sharing, you can continue to use it. It's secure against computationally unbounded attackers i.e. it offers information theoretic security. It's essentially a system with less equations than variables, so there are many equally likely solutions. Oct 9, 2013 at 13:57
• Hashes/one-way-functions are a completely different issue. As far as we can tell they still exist, you just need to use twice the size. A 512 bit hash will offer 256 bits of security against QCs, far from any realistic attack. Oct 9, 2013 at 13:58
• @mikeazo I have updated the question with a few schemes. It would be interesting to know the facts about the other schemes mentioned as well. Oct 10, 2013 at 2:19
• Are you operating under Shannon Entropy/information theory? You can't do that so much with quantum computing Apr 2, 2018 at 3:17

Let us assume that the shares were generated using a truly random stream; in that case, someone with $N-1$ shares (where $N$ is the threshold) does not have enough information to derive any information about the secret, even if we assumed that the attacker had unbounded computational resources.