Secret-Sharing Schemes: A Survey

Abstract

Abstract. A secret-sharing scheme is a method by which a dealer distributes shares to parties such that only authorized subsets of parties can reconstruct the secret. Secret-sharing schemes are important tools in cryptography and they are used as a building box in many secure protocols, e.g., general protocol for multiparty computation, Byzantine agreement, threshold cryptography, access control, attribute-based encryption, and generalized oblivious transfer. In this survey, we will describe the most important constructions of secret-sharing schemes, explaining the connections between secret-sharing schemes and monotone formulae and monotone span programs. The main problem with known secret-sharing schemes is the large share size: it is exponential in the number of parties. We conjecture that this is unavoidable. We will discuss the known lower bounds on the share size. These lower bounds are fairly weak and there is a big gap between the lower and upper bounds. For linear secret-sharing schemes, which is a class of schemes based on linear algebra that contains most known schemes, super-polynomial lower bounds on the share size are known. We will describe the proofs of these lower bounds. We will also present two results connecting secret-sharing schemes for a Hamiltonian access structure to the NP vs. coNP problem and to a major open problem in cryptography -constructing oblivious-transfer protocols from one-way functions.

Communication Complexity of Conditional Disclosure of Secrets and Attribute-Based Encryption

“…[5,Section 5]). Most of these works rely on Shannon-type inequalities on entropy of random variables, which do not seem applicable to our setting.…”

Ideal Hierarchical Secret Sharing Schemes

“…T 1 We consider in this case the structures with hmin Γ = {(x 1 , 0, 0), (y 1 , y 2 , y 3 )} such that y 2 = |Π 2 | if y 1 = 0, and y 2 > 0, and 1 < y 3 = |Π 3 | − 1, and x 1 = y 1 + y 2 + y 3 − 1.…”

“…Nevertheless, it seems clear that we cannot expect to find efficient secret sharing schemes for all access structures. The reader is referred to the recent survey by Beimel [1] on this topic. Because of that, the construction of ideal secret sharing schemes for families of access structures with interesting properties for the applications is worth considering.…”

A proposal of privacy preserving reinforcement learning for secure multiparty computation

“…SMC is one of these methods. [7][8][9][10] Most of the works in SMC are developed on applying the model of SMC on different data distributions such as vertically, horizontally and arbitrarily partitioned data. [11][12][13][14][15] They are the methods that each server performs its processing for the subset of data.…”