Re: Shared-Secret similar algorithm

[Ray Dillinger]

On Mon, 14 May 2001, Adam Back wrote:

>You seem to want any one user from the set of share holders to be able to
>decrypt, but still have a single public key.  However do you care if share
>holders can compute each other's shares?  Bear in mind you can't revoke
>shares without changing the public key.  If you're not trying to hide shares
>from other share holders (shares are just random numbers and not worth
>protecting in themselves), what about having the share holders sharing the
>private key?
>

This works, if it doesn't really matter that the users have separate 
keys -- ie, if it won't cause a hash collision or something in some 
other part of the system, or if you don't care that the users can 
identify each other by their key fingerprint. 

                                Bear