shamir

Overview ¶

Package shamir implements Shamir's Secret Sharing over GF(256).

Each byte of a secret is split independently using a random polynomial of degree (threshold-1) over GF(256) with the irreducible polynomial x^8 + x^4 + x^3 + x + 1 (0x11b, the AES field).

Shares are encoded as [x-coordinate (1 byte)] + [y-values (len(secret) bytes)]. x-coordinates are 1-indexed to avoid evaluating at 0 (which would leak the secret).