4 ms·

Plenty. Look into publicly verifiable secret sharing. https://en.wikipedia.org/wiki/Publicly_Verifiable_Secret_Sharing https://en.wikipedia.org/wiki/Publicly_Ve

• anonymousDan 4y ago
  That doesn't seem to answer the question - the schemes on your link still have a dealer with access to the original secret I think? Is it possible to have each participant contribute an input that forms part of the original secret, such that they get combined to form the secret and then split into shares in a way that doesn't require a dealer?
  • lrvick 4y ago
    See my other comment in this thread which details a solution to this.