How Shamir's Secret Sharing Works (ente.com)

Article summary

The article explains how Shamir's Secret Sharing works, a method of splitting a secret into pieces so that some number of them can recover it, and any smaller number reveals nothing. This is achieved by using polynomials to hide the secret, where each share is a point on the polynomial. The article also discusses how this method is used in Ente's Legacy Kit to enable secure recovery of secrets. The technique has various applications, including secure key sharing and backup systems.

Main themes

• Shamir's Secret Sharing
• Secure Key Sharing
• Polynomial-based cryptography
• Secure backup systems
• Threshold cryptography

What commenters say

• Shamir's Secret Sharing is similar to other erasure codes like Reed-Solomon, but it provides information-theoretic security, which is essential for secure secret sharing.
• The use of Shamir's Secret Sharing in real-world applications, such as Ente's Legacy Kit, demonstrates its practicality and effectiveness in secure key sharing and backup systems.
• Some commenters argue that implementing Shamir's Secret Sharing can be complex, especially when it comes to combining shares from different sources, and that standardization of file formats is necessary.
• Others propose using alternative methods, such as Monotone Span Programs, for secret sharing, which may offer more flexibility and security in certain scenarios.
• The discussion highlights the importance of transparency and openness in implementing Shamir's Secret Sharing, including providing detailed whitepapers and security information to build trust with users.
• Some commenters note that the technique has been used in various contexts, including education, to teach students about cryptography and secure key sharing.
• The use of Shamir's Secret Sharing in high-stakes applications, such as DNS root key management, demonstrates its reliability and security in critical infrastructure.
• There are different opinions on the best way to implement Shamir's Secret Sharing, including the use of static pages and dead man's switches to ensure long-term accessibility of encrypted data.