Computational Aspects of Ideal (t, n)-Threshold Scheme of Chen, Laing, and Martin
In CANS 2016, Chen, Laing, and Martin proposed an ideal (t, n)-threshold secret sharing scheme (the CLM scheme) based on random linear code. However, in this paper we show that this scheme is essentially same as the one proposed by Karnin, Greene, and Hellman in 1983 (the KGH scheme) from privacy perspective. Further, the authors did not analyzed memory or XOR operations required to either store or calculate an inverse matrix needed for recovering the secret. In this paper, we analyze computational aspects of the CLM scheme and discuss various methods through which the inverse matrix required during the secret recovery can be obtained. Our analysis shows that for \(n \le 30\) all the required inverse matrices can be stored in memory whereas for \(30 \le n < 9000\) calculating the inverse as and when required is more appropriate. However, the CLM scheme becomes impractical for \(n > 9000\). Another method which we discuss to recover the secret in KGH scheme is to obtain only the first column of the inverse matrix using Lagrange’s interpolation however, as we show, this method can not be used with the CLM scheme. Some potential application of the secret sharing schemes are also discussed. From our analysis we conclude that the CLM scheme is neither novel nor as practical as has been suggested by Chen et al. whereas the KGH scheme is better suited for practical applications with large n.
This publication was made possible by the NPRP award NPRP8-2158-1-423 from the Qatar National Research Fund (a member of The Qatar Foundation). The statements made herein are solely the responsibility of the authors.
- 2.Blakely, G.: Safeguarding cryptographic keys. In: Proceedings of the National Computer Conference, vol. 48, pp. 313–317 (1979)Google Scholar
- 3.Kurihara, J., Kiyomoto, S., Fukushima, K., Tanaka, T.: A new \((k, n)\)-threshold secret sharing scheme and its extension. In: Wu, T.-C., Lei, C.-L., Rijmen, V., Lee, D.-T. (eds.) ISC 2008. LNCS, vol. 5222, pp. 455–470. Springer, Heidelberg (2008). https://doi.org/10.1007/978-3-540-85886-7_31CrossRefGoogle Scholar
- 5.Lv, C., Jia, X., Tian, L., Jing, J., Sun, M.: Efficient ideal threshold secret sharing schemes based on exclusive-or operations. In: Proceedings of 4th International Conference on Network and System Security (NSS), pp. 136–143 (2010)Google Scholar
- 7.Wang, Y., Desmedt, Y.: Efficient secret sharing schemes achieving optimal information rate. In: Proceedings of IEEE Information Theory Workshop (ITW) 2014, Tasmania, Australia, pp. 516–520, November 2014Google Scholar
- 8.Chen, L., Camble, P.T., Watkins, M.R., Henry, I.J.: Utilizing error correction (ECC) for secure secret sharing. Hewlett Packard Enterprise Development LP, World Intellectual Property Organisation. Patent Number WO2016048297 (2016). https://www.google.com/patents/WO2016048297A1?cl=en
- 15.Worsch, T.: Lower and Upper Bounds for (Sums of) Binomial Coefficients. http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.44.9677
- 19.NTL: A Library for doing Number Theory. http://www.shoup.net/ntl/