Abstract :
In secret sharing schemes (SS), cheaters may open forged shares so that honest participants would recover a forged secret. This problem is closely related to error correcting codes. For an SS, consider a code C such that a codeword is a possible (υ1,…,υ n), where υi is a share of participant Pi. Let dmin denote the minimum Hamming distance of C. Then cheaters can be detected from (υ1,…,υn) if up to [(dmin -1)/2] participants are cheaters. McEliece and Sarwate (1981) showed that dmin=n-k+1 for Shamir´s (1979) (k,n)-threshold scheme. Karnin et al. (1982) showed this equality for any ideal (k,n)-threshold scheme. (Blakeley and Kabatianskii (1995) showed another proof.) On the other hand, (k,n)-threshold schemes were generalized to monotone access structures Γ, where ΓΔ={A|A can determine the secret} (Itoh et al. 1993). This paper first proves dmin⩽n-maxB∉Γ|B| for any monotone access structure Γ. Further, we present an SS which satisfies d min=n-maxB∉Γ|B| for any Γ. This SS has a maximum distance separable (MDS) property. Third, we introduce a new measure dcheat as follows. The correct secret s can be recovered from (υ1,…,υn) if there are at most [(dcheat-1)/2] cheaters. The fact of cheating can be detected from (υ1,…,υn) if there are at most dcheat-1 cheaters. We prove that dmin ⩽dcheat=n-maxB∉Γ |B|
Keywords :
cryptography; error correction codes; MDS secret sharing schemes; cheaters; correct secret; error correcting codes; forged secret; forged shares; maximum distance separable schemes; minimum Hamming distance; monotone access structures; secret sharing schemes; threshold scheme; Cryptography; Error correction codes; Hamming distance; Random variables; Virtual colonoscopy;