# Questions tagged [secret-sharing]

Secret sharing refers to splitting a secret among multiple parties so that together they can reconstruct it. All parties, or just a threshold number of them, can be required for reconstruction. If fewer than the required number of parties participate, no information should be leaked about the secret.

558 questions
Filter by
Sorted by
Tagged with
1 vote
37 views

### What is the difference between Shamir secret sharing and additive sharing?

When it comes to applications, such as multiplication or addition, is there any difference between Shamir secret sharing and additive secret sharing?
41 views

### How to calculate inverse of scalar product using secret sharing

Following a question about calculating the inverse value among two parties, I want to ask about the possibility of getting an inverse of the scalar product (|I|. |J|) that is part of the computation ...
320 views

### Is it possible to create a mix of predefined and generated shares for Shamir's Secret Sharing?

In standard Shamir's Secret Sharing schemes the shares are generated from randomly generated polynomials. I was wandering if it would be possible to create some predefined shares that a user would be ...
• 21
52 views

### Multiplication of two Shamir Secret Shares

In Shamir Secret Sharing, I'm trying to figure out that how can I multiply a constant and shares with different mods (fields) and obtain the multiplication of this constant and secret? Assume ...
184 views

### Secret sharing thresold scheme with small shares

Shamir secret sharing1 is a common method to split an arbitrary secret (login credentials, symmetric or private key) between $n$ persons, so that a threshold of $k$ persons is required to rebuild the ...
• 140k
31 views

### Implementing Secret Sharing Among Multiple Parties

I'm working on a scenario where a safe has a lock code '42', and this code needs to be shared securely among four individuals. The goal is to set up a system where at least two out of these four ...
25 views

### Zero Knowlege/Trust Architecture with shared encryption keys (maybe Shamir's secret sharing?)

I'm working on an idea for a backend data store that stores encrypted data that is zero knowledge/trust, however is shareable to a number of parties. I don't want the backend service to know anything ...
• 121
1 vote
35 views

There is a two-party computation protocol based on 2-out-of-2 additive secret sharing in Figure 1. Party $P_0$ holds secret shares $[a]_0, [b]_0$, and party $P_1$ holds secret shares $[a]_1, [b]_1$ ...
• 194
1 vote
48 views

### Detecting Cheaters in a Secret Sharing Scheme with a Fixed Number of Cheaters

I'm working on a secret sharing scheme and facing a challenge in detecting cheaters among the shareholders. Here's the setup: There's a decoder $D$, a set of $2T$ shareholders, and a combiner/...
• 111
61 views

111 views

### Secret sharing scheme which cannot tell fake shares from real ones

I am looking for a secret sharing algorithm which accepts a large array, some elements of which are real shares and the rest are fake. The algorithm should satisfy the following conditions: If all ...
36 views

### can ownership proofs be added to circuits to make them zk-snark resistant to quantum proof forgery attacks?

According to my previous question the proofs cannot be broken by quantum computation, you cannot obtain the witness of the generated zk-snark proof. link to my previous question. Now if the concern is ...
1 vote
55 views

1 vote
122 views

### The state of Shamir's Secret Sharing in 2023

Shamir's Secret Sharing GPL implementation called ssss got removed from Tails OS years back. Is Shamir's secret sharing still secure nowadays? Why was it removed ...
1 vote
111 views

### Why don't basically all "clusters" and similar distributed systems use Shamir's secret sharing method?

When I came to the topic of Ansible (Vault), when deploying secrets in Ansible and other passwords up to 128 characters Shamir's Secret Sharing would be an ideal solution I think: The secret is never ...
97 views

• 103
77 views

### How to calculate inverse of an element using MPC and secret sharing

Suppose we have multiple parties ${P_i}$ each holding a secret share $(y_i,k_i)$ of the secret $(y,k)$. How can we calculate the inverse value $(y+k)^{-1}$ using multiparty computation such that these ...
1 vote
42 views

### What are the software tools used for customizing secret sharing and network steganography, which can be used for enhancing secret data transmission? [closed]

My goal is to enhance by bringing some changes to these techniques and schemes so that any improvements can be brought to them. So I tried to find some of the tools and came up with these: Secret ...
199 views

### Reference for basic secret sharing and MPC arithmetic algorithms

I am looking for references for the most basic secret sharing and MPC arithmetic algorithms for generic rings or prime fields. Problem: Suppose there are $m$ parties $P_1, \ldots, P_m$ which wish to ...
• 133
1 vote
94 views

### Feldman Verifiable secret sharing verify [closed]

I recently started to learn about Shamir secret sharing and Feldman's VSS Scheme. I know the concepts But I can't figure out how it works. mostly because many of modulates are with "p" and ...
1 vote
97 views

### Why does Shamir secret sharing appear to need ordered shares?

The implementation of Shamir secret sharing in this code, only generates the original image if the shares are provided in consecutive order (ex: [2,3,4]) and won't work in any other share order (ex: [...
• 111
44 views

### recovering the original secret of secret sharing [closed]

What is the specific process of recovering the original secret of secret sharing? Is the parties with secret shares communicating with each other and exchanging secret shares, and if the number of ...
• 41
2k views

### Is there a way to calculate a hash with two people so that no one knows the pre-image but if they get together they do?

I'm trying to find a way to have multi party hash computation, more specifically for SHA256. I want for two people to be able to compute a hash so that none of them knows the pre-image but when they ...
73 views

### Lagrange interpolation in the exponent

I am going over the paper https://verifiable-timed-signatures.github.io/web/assets/paper.pdf and on page 5, it says the following: Suppose I have a t-out-of-n threshold sharing scheme for the secret \$\...
• 45
1 vote
79 views

### Communication through shared seed in RNG

Given that there are two parties, and a process has been conducted by which both parties are knowledgeable of a shared value p, how could two parties communicate with each other over a public channel ...
29 views

### Why zero sharings are used to mask secret value to the masked value appears to be a random value?

Some interpretations say "By masking a secret value with a uniformly random zero sharing, the masked value appears to be a random value drawn from a uniform distribution. This randomness helps ...
• 21