[Freedombox-discuss] Key Splitting to Protect Client Data on Boxes

[Sandy Harris]

On Thu, Feb 7, 2013 at 11:24 AM, Daniel Kahn Gillmor
<dkg at fifthhorseman.net> wrote:

> Nick is proposing using SSSS, which (if i understand the theory
> correctly) doesn't leak any information about the secret material until
> the correct number of pieces are assembled in one place (at which point
> the entire secret is available).
>
>  https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing
>
> So i don't think nick's proposal should leak any of the bits of the key.

Actually, many secret sharing schemes have been published.
https://en.wikipedia.org/wiki/Secret_sharing

Many but not all variations on or proposed improvements to
Shamir's. There is a whole lot of literature and it would likely
take someone familiar with it to choose well here.