Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Very minor Shamir split count leakage #2608

Closed
grocid opened this issue Apr 18, 2017 · 1 comment
Closed

Very minor Shamir split count leakage #2608

grocid opened this issue Apr 18, 2017 · 1 comment

Comments

@grocid
Copy link

grocid commented Apr 18, 2017

In Vault, a set of n splits of a byte is generated as X = {1, 2, 3, ..., n} and Y = {p(1), p(2), p(3), ... , p(n)}, where the x coordinate is appended to the end of each split. Observing a split 0xAB05 gives a lower bound on how many splits being generated (n ≥ 5), which might leak some information about the infrastructure in which Vault is deployed, depending on the scenario. A very simple fix is to generate a random set of x coordinates instead of sequential coordinates.

Although this is by no means a significant leakage, it can be mitigated very easily, and leaking information is never a good thing :-)

@v6
Copy link
Contributor

v6 commented Oct 15, 2018

// , Can you give an example of the kind of info. this might leak, or of one of the scenarios?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants