Sharing a secret efficiently amongst a group of participants is not easy since there is always an adversary / eavesdropper trying to retrieve the secret. In secret sharing schemes, every participant is given a unique share. When the desired group of participants come together and provide their shares, the secret is obtained. For other combinations of shares, a garbage value is returned. A threshold secret sharing scheme was proposed by Shamir and Blakley independently. In this (n,t) threshold secret sharing scheme, the secret can be obtained when at least t out of n participants contribute their shares. This paper proposes a novel algorithm to reveal the secret only to the subsets of participants belonging to the access structure. This scheme implements totally generalized ideal secret sharing. Unlike threshold secret sharing schemes, this scheme reveals the secret only to the authorized sets of participants, not any arbitrary set of users with cardinality more than or equal to t. Since any access structure can be realized with this scheme, this scheme can be exploited to implement various access priorities and access control mechanisms. A major advantage of this scheme over the existing ones is that the shares being distributed to the participants is totally independent of the secret being shared. Hence, no restrictions are imposed on the scheme and it finds a wider use in real world applications.
翻译:在一组参与者之间有效分享秘密并非易事,因为总是有对手/窃听者试图获取秘密。在秘密分享计划中,每个参与者都有独特的份额。当想要的参与者群体走到一起来提供他们的股份时,就会获得秘密。对于其他股份组合,垃圾价值会得到回报。Shamir和Blakley独立地提出了一个临界秘密分享计划。在这个(n,t)门槛秘密分享计划中,当至少从n参与者中拿出股份时,就可以获得秘密。本文提出一种新的算法,将秘密只透露给属于准入结构的参与者子集。这个计划实施完全普遍的理想秘密分享计划,与门槛秘密分享计划不同,这个计划只透露给经授权的参与者的一组秘密分享计划,而不是任何具有高于或等于基点的任意用户的一组。由于这个计划可以实现任何准入结构,这个计划可以被用来实施各种准入优先事项和准入控制机制。这个计划的主要优势是,向参与者分发的股份在进入这一秘密分享计划时,不能完全独立地使用。因此,对于一个秘密分享计划没有任何限制。