Reimagining Secret Sharing: Creating a Safer and More Versatile Primitive by Adding Authenticity, Correcting Errors, and Reducing Randomness Requirements

Aiming to strengthen classical secret-sharing to make it a more directly useful primitive for human endusers, we develop definitions, theorems, and efficient constructions for what we call adept secret-sharing. Our primary concerns are the properties we call privacy, authenticity, and error correcti...

Full description

Bibliographic Details
Main Authors: Bellare Mihir, Dai Wei, Rogaway Phillip
Format: Article
Language:English
Published: Sciendo 2020-10-01
Series:Proceedings on Privacy Enhancing Technologies
Subjects:
Online Access:https://doi.org/10.2478/popets-2020-0082
id doaj-437461a29bf24418b4307459bf158a18
record_format Article
spelling doaj-437461a29bf24418b4307459bf158a182021-09-05T14:01:11ZengSciendoProceedings on Privacy Enhancing Technologies2299-09842020-10-012020446149010.2478/popets-2020-0082popets-2020-0082Reimagining Secret Sharing: Creating a Safer and More Versatile Primitive by Adding Authenticity, Correcting Errors, and Reducing Randomness RequirementsBellare Mihir0Dai Wei1Rogaway Phillip2University of California, San Diego, USA.University of California, San Diego, USA.University of California, Davis, USA.Aiming to strengthen classical secret-sharing to make it a more directly useful primitive for human endusers, we develop definitions, theorems, and efficient constructions for what we call adept secret-sharing. Our primary concerns are the properties we call privacy, authenticity, and error correction. Privacy strengthens the classical requirement by ensuring maximal confidentiality even if the dealer does not employ fresh, uniformly random coins with each sharing. That might happen either intentionally—to enable reproducible secretsharing— or unintentionally, when an entropy source fails. Authenticity is a shareholder’s guarantee that a secret recovered using his or her share will coincide with the value the dealer committed to at the time the secret was shared. Error correction is the guarantee that recovery of a secret will succeed, also identifying the valid shares, exactly when there is a unique explanation as to which shares implicate what secret. These concerns arise organically from a desire to create general-purpose libraries and apps for secret sharing that can withstand both strong adversaries and routine operational errors.https://doi.org/10.2478/popets-2020-0082adept secret-sharingcomputational secret sharingcryptographic definitionssecret sharing
collection DOAJ
language English
format Article
sources DOAJ
author Bellare Mihir
Dai Wei
Rogaway Phillip
spellingShingle Bellare Mihir
Dai Wei
Rogaway Phillip
Reimagining Secret Sharing: Creating a Safer and More Versatile Primitive by Adding Authenticity, Correcting Errors, and Reducing Randomness Requirements
Proceedings on Privacy Enhancing Technologies
adept secret-sharing
computational secret sharing
cryptographic definitions
secret sharing
author_facet Bellare Mihir
Dai Wei
Rogaway Phillip
author_sort Bellare Mihir
title Reimagining Secret Sharing: Creating a Safer and More Versatile Primitive by Adding Authenticity, Correcting Errors, and Reducing Randomness Requirements
title_short Reimagining Secret Sharing: Creating a Safer and More Versatile Primitive by Adding Authenticity, Correcting Errors, and Reducing Randomness Requirements
title_full Reimagining Secret Sharing: Creating a Safer and More Versatile Primitive by Adding Authenticity, Correcting Errors, and Reducing Randomness Requirements
title_fullStr Reimagining Secret Sharing: Creating a Safer and More Versatile Primitive by Adding Authenticity, Correcting Errors, and Reducing Randomness Requirements
title_full_unstemmed Reimagining Secret Sharing: Creating a Safer and More Versatile Primitive by Adding Authenticity, Correcting Errors, and Reducing Randomness Requirements
title_sort reimagining secret sharing: creating a safer and more versatile primitive by adding authenticity, correcting errors, and reducing randomness requirements
publisher Sciendo
series Proceedings on Privacy Enhancing Technologies
issn 2299-0984
publishDate 2020-10-01
description Aiming to strengthen classical secret-sharing to make it a more directly useful primitive for human endusers, we develop definitions, theorems, and efficient constructions for what we call adept secret-sharing. Our primary concerns are the properties we call privacy, authenticity, and error correction. Privacy strengthens the classical requirement by ensuring maximal confidentiality even if the dealer does not employ fresh, uniformly random coins with each sharing. That might happen either intentionally—to enable reproducible secretsharing— or unintentionally, when an entropy source fails. Authenticity is a shareholder’s guarantee that a secret recovered using his or her share will coincide with the value the dealer committed to at the time the secret was shared. Error correction is the guarantee that recovery of a secret will succeed, also identifying the valid shares, exactly when there is a unique explanation as to which shares implicate what secret. These concerns arise organically from a desire to create general-purpose libraries and apps for secret sharing that can withstand both strong adversaries and routine operational errors.
topic adept secret-sharing
computational secret sharing
cryptographic definitions
secret sharing
url https://doi.org/10.2478/popets-2020-0082
work_keys_str_mv AT bellaremihir reimaginingsecretsharingcreatingasaferandmoreversatileprimitivebyaddingauthenticitycorrectingerrorsandreducingrandomnessrequirements
AT daiwei reimaginingsecretsharingcreatingasaferandmoreversatileprimitivebyaddingauthenticitycorrectingerrorsandreducingrandomnessrequirements
AT rogawayphillip reimaginingsecretsharingcreatingasaferandmoreversatileprimitivebyaddingauthenticitycorrectingerrorsandreducingrandomnessrequirements
_version_ 1717810593941946368