<p>The evolving <i>k</i>-threshold secret sharing scheme allows the dealer to distribute the secret to many participants such that only no less than <i>k</i> shares together can restore the secret. In contrast to the conventional secret sharing scheme, the evolving scheme allows the number of participants to be uncertain and even ever-growing. An evolving <i>k</i>-threshold secret sharing scheme is recognized as a good scheme when it possesses the perfect security and a smaller share size. In this paper, we consider the evolving secret sharing scheme with the threshold <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\(k=3\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>k</mi> <mo>=</mo> <mn>3</mn> </mrow> </math></EquationSource> </InlineEquation>. First, we point out that the evolving 3-threshold secret sharing scheme proposed in D’Arco et al. (Theor Comput Sci 859:149–161, 2021) does not possess the perfect security. To solve this issue, we then present a revised version that attains perfect security. We follow the overall construction framework of D’Arco et al. (2021), which combines a normal evolving 3-threshold scheme and a 3-threshold scheme. Within this same framework, we adopt the scheme proposed in Cheng et al. (in: ASIACRYPT 2025, 2025) as the required normal evolving 3-threshold scheme and design a new 3-threshold secret sharing scheme with perfect security over an extension field as the required 3-threshold scheme, which serves as the core component of the entire evolving 3-threshold scheme. Finally, by analyzing, the <i>t</i>-th share size of the evolving 3-threshold scheme is <InlineEquation ID="IEq2"> <EquationSource Format="TEX">\({\lg t+O( \lg \lceil \sqrt{\lg t} \rceil )+2\lceil \sqrt{\lg t} \rceil (\ell +1)-\ell +1}\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mo>lg</mo> <mi>t</mi> <mo>+</mo> <mi>O</mi> <mrow> <mo stretchy="false">(</mo> <mo>lg</mo> <mrow> <mo>⌈</mo> <msqrt> <mrow> <mo>lg</mo> <mi>t</mi> </mrow> </msqrt> <mo>⌉</mo> </mrow> <mo stretchy="false">)</mo> </mrow> <mo>+</mo> <mn>2</mn> <mrow> <mo>⌈</mo> <msqrt> <mrow> <mo>lg</mo> <mi>t</mi> </mrow> </msqrt> <mo>⌉</mo> </mrow> <mrow> <mo stretchy="false">(</mo> <mi>ℓ</mi> <mo>+</mo> <mn>1</mn> <mo stretchy="false">)</mo> </mrow> <mo>-</mo> <mi>ℓ</mi> <mo>+</mo> <mn>1</mn> </mrow> </math></EquationSource> </InlineEquation> for an <InlineEquation ID="IEq3"> <EquationSource Format="TEX">\(\ell \)</EquationSource> <EquationSource Format="MATHML"><math> <mi>ℓ</mi> </math></EquationSource> </InlineEquation>-bit secret, where <InlineEquation ID="IEq4"> <EquationSource Format="TEX">\(\lg \)</EquationSource> <EquationSource Format="MATHML"><math> <mo>lg</mo> </math></EquationSource> </InlineEquation> denotes the binary logarithm. By comparing, for known evolving 3-threshold schemes’ share size, the most important term is <InlineEquation ID="IEq5"> <EquationSource Format="TEX">\(2\lg t\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mn>2</mn> <mo>lg</mo> <mi>t</mi> </mrow> </math></EquationSource> </InlineEquation>, the scheme reduces the most important term from <InlineEquation ID="IEq6"> <EquationSource Format="TEX">\(2\lg t\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mn>2</mn> <mo>lg</mo> <mi>t</mi> </mrow> </math></EquationSource> </InlineEquation> to <InlineEquation ID="IEq7"> <EquationSource Format="TEX">\(\lg t\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mo>lg</mo> <mi>t</mi> </mrow> </math></EquationSource> </InlineEquation>. Thus, the proposed scheme can achieve perfect security and a smaller share size.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A construction of evolving 3-threshold secret sharing scheme with perfect security and smaller share size

  • Qi Cheng,
  • Hongru Cao,
  • Leilei Yu,
  • Sian-Jheng Lin

摘要

The evolving k-threshold secret sharing scheme allows the dealer to distribute the secret to many participants such that only no less than k shares together can restore the secret. In contrast to the conventional secret sharing scheme, the evolving scheme allows the number of participants to be uncertain and even ever-growing. An evolving k-threshold secret sharing scheme is recognized as a good scheme when it possesses the perfect security and a smaller share size. In this paper, we consider the evolving secret sharing scheme with the threshold \(k=3\) k = 3 . First, we point out that the evolving 3-threshold secret sharing scheme proposed in D’Arco et al. (Theor Comput Sci 859:149–161, 2021) does not possess the perfect security. To solve this issue, we then present a revised version that attains perfect security. We follow the overall construction framework of D’Arco et al. (2021), which combines a normal evolving 3-threshold scheme and a 3-threshold scheme. Within this same framework, we adopt the scheme proposed in Cheng et al. (in: ASIACRYPT 2025, 2025) as the required normal evolving 3-threshold scheme and design a new 3-threshold secret sharing scheme with perfect security over an extension field as the required 3-threshold scheme, which serves as the core component of the entire evolving 3-threshold scheme. Finally, by analyzing, the t-th share size of the evolving 3-threshold scheme is \({\lg t+O( \lg \lceil \sqrt{\lg t} \rceil )+2\lceil \sqrt{\lg t} \rceil (\ell +1)-\ell +1}\) lg t + O ( lg lg t ) + 2 lg t ( + 1 ) - + 1 for an \(\ell \) -bit secret, where \(\lg \) lg denotes the binary logarithm. By comparing, for known evolving 3-threshold schemes’ share size, the most important term is \(2\lg t\) 2 lg t , the scheme reduces the most important term from \(2\lg t\) 2 lg t to \(\lg t\) lg t . Thus, the proposed scheme can achieve perfect security and a smaller share size.