secret sharing (Re: CDR design document)

[Adam Back]

Jon Wienke <JonWienk at ix.netcom.com> writes:
> At 10:55 PM 2/21/97 GMT, Adam Back wrote:
> >
> >Here is a proposal for consideration for inclusion in the OpenPGP
> >standard:
> >
> >	http://www.dcs.ex.ac.uk/~aba/cdr/
> 
> Great work, Adam!  Pursuant to some of the recent rants on cypherpunks, I
> would like to see a proposal for a secret sharing mechanism that would
> allow the recovery of a storage-only key with m of n shares in the event
> that the passphrase to the storage key is unavailable, with the following
> attributes:

I think PGP Inc are considering secret sharing for later versions.
Perhaps it is too much for this iteration?

Secret sharing is nice, I agree, but can be complex too: what if it's
3 of 5, and one of the 5 leaves to join a competitor, can you
redistribute the share without creating a new key without losing
security?  What new packets would be required, etc.

Adam
-- 
Now officially an EAR violation...
Have *you* exported RSA today? --> http://www.dcs.ex.ac.uk/~aba/rsa/

print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<>
)]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`