3 ms·

Does anyone know of a tool like this that’s maintained? I actually would like to use this for a fairly out there use case but it hasn’t been updated in 3 years

• matthewtse 3y ago
  That was the problem for me too. There are many implementations of Shamir Secret Sharing out there, but they're all idiosyncratic and impossible to vet unless you have a background in cryptographic security, and like you said nearly all are not actively maintained. The types of things you would go to the trouble of Shamir Secret Sharing, are also the types of things that might surface decades later (e.g. crypto keys). Imagine going on a treasure hunt to retrieve 2 shards, and then needing to go on an additional internet archaeological hunt for the specific GitHub repository used to generate the shards. Unless someone solves this issue, I can't see Shamir Secret Sharing becoming any more mainstream.
  • d-z-m 3y ago
    The author of this tool basically took the Shamir code from Hashicorp Vault, which is pretty mainstream. If you're looking for a solid implementation, I would start there[0]. I wouldn't use the Shamir code from this repo, as it's an old version of the vault code using field arithmetic that doesn't run in constant time. [0]: https://github.com/hashicorp/vault/blob/main/shamir/shamir.go https://github.com/hashicorp/vault/blob/main/shamir/shamir.g...