Have any y'all used ssss?

Discussion in 'privacy general' started by hierophant, Oct 8, 2010.

Thread Status:
Not open for further replies.
  1. hierophant

    hierophant Registered Member

    Joined:
    Dec 18, 2009
    Posts:
    854
    I just came across ssss -- an implementation of Shamir's secret sharing scheme. It seems like a great way to save passwords. Have any y'all used it? Comments appreciated.

    Edit: OK, I put this in the wrong place. Mea culpa.
     
    Last edited: Oct 8, 2010
  2. nix

    nix Registered Member

    Joined:
    Sep 22, 2010
    Posts:
    257
    Location:
    Miami
    Haven't used it, but read about it and related secret shares. Like it.
     
  3. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    3,875
    Trouble is, when you have a secret that is shared...is it really a secret? :D
     
  4. hierophant

    hierophant Registered Member

    Joined:
    Dec 18, 2009
    Posts:
    854
    Right ;)

    Anyway, two aspects interest me. One, it's possible to distribute pieces of a secret to many people such that some arbitrary percentage (100% even) must cooperate in order to discover the secret -- such as the revocation certificate for the Debian archive key, or the DNSSEC root key. If the number were large enough, perhaps this could be the basis of a trust model, or rather, a "threshold-distrust" model.

    The other is storing strong passwords (or keys or certicicates) in pieces, in multiple locations, and/or transmitting them via multiple channels.
     
  5. tobacco

    tobacco Frequent Poster

    Joined:
    Nov 7, 2005
    Posts:
    1,497
    Location:
    British Columbia
    @hierophant

    Despite all your efforts and anonymity programs, you've managed to give away your location using one word - "Y'all" :D
     
  6. hierophant

    hierophant Registered Member

    Joined:
    Dec 18, 2009
    Posts:
    854
    It's an affectation, BTW :eek: Can't deny that I've spent serious time with Southerners, though. Polite folk. Women carry cute little guns in their purses.
     
  7. Lyx

    Lyx Registered Member

    Joined:
    Apr 4, 2009
    Posts:
    83

    The secret continue to be a secret, because it is only shared, and not revealed. When you give a "shared secret" to 10 personns, the 10 ten collaborating are able to find the secret, but no other subset of 9 personns (or least) is able to guess it.

    2 distincts notions:

    Shared Secret: http://en.wikipedia.org/wiki/Shared_secret

    Secret Sharing: http://en.wikipedia.org/wiki/Secret_sharing

    Hierophant I think was speaking about Secret Sharing.
     
  8. hierophant

    hierophant Registered Member

    Joined:
    Dec 18, 2009
    Posts:
    854
    Yes, I was.
     
Loading...
Thread Status:
Not open for further replies.