I know there are many AES MPC implementations, but in general, is it possible to restore the raw AES key if we have access to all of the nodes? If we take, for example, VIFF and its "shares". Is it difficult?


If you have the values of all nodes you can always easily recover the plaintext in MPC.

| improve this answer | |
  • 2
    $\begingroup$ Indeed, if this were not the case, then you could implement white-box cryptography by implementing all the nodes on a multiparty MPC implementation on the same device... $\endgroup$ – poncho Mar 14 '17 at 18:42
  • $\begingroup$ I have to tell the whitebox guys they'll love this idea. $\endgroup$ – Elias Mar 14 '17 at 18:45
  • $\begingroup$ Indeed; it would be a lot simpler than what they're doing now... $\endgroup$ – poncho Mar 14 '17 at 18:48
  • $\begingroup$ by plaintext you mean AES key? $\endgroup$ – John dow Mar 14 '17 at 18:54
  • $\begingroup$ @Johndow Doesn't really matter. Whatever was protected by splitting it between the different parties is available if you combine the data from all the parties. $\endgroup$ – Elias Mar 14 '17 at 22:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.