in reply to Re: Re: Bitwise File Shredding
in thread Bitwise File Shredding
But they needn't be the same size (well, depending on how you look at it). In some RSA threshold signatures, the secret key d is split into random integers within a range of {-A, ..., A} (for some A much bigger than the valid range of d) so that all the shares add up to d. Some shares may certainly be much smaller than others, and you could store them in fewer bits. But the fact that each key could be as large as A means you have no information about the secret key by knowing all but one share -- the last share could be large enough that adding it onto the current sum can yield every valid choice of d with equal probability.
However, if a participant publicly announced that his share of the secret could be stored in a very small number of bits, you may be able to get information about the secret if you have all the shares but his -- you may know that the secret d must lie in a smaller range of valid choices.
blokhead
|
---|
Replies are listed 'Best First'. | |
---|---|
Re: Re: Re: Re: Bitwise File Shredding
by jdklueber (Beadle) on Apr 24, 2004 at 11:53 UTC |