Post
Topic
Board Development & Technical Discussion
Re: GSSSA - Hide your wallet in shares
by
Chillance
on 05/09/2017, 17:04:54 UTC
Almost everyone I've ever seen link to their own binaries on virus total was in fact distributing malware.  Virustotal is worthless for the kind of custom malware that is often posted on this forum and gives people a false sense of security.

There are many programs out there for shamir secret sharing, such as http://point-at-infinity.org/ssss/  most implementations I've seen leave a lot to be desired, including insecure random number generation which doesn't grant full information theoretic security, to incorrect share splitting such that sub threshold collections are sufficient to recover most of a key, to just gross timing sidechannels which any secret key handling software should avoid.

It is my view that In general, secret sharing is largely snake oil in practice because you must have a computer to split and join keys and if that computer is compromised your security is gone.  If you really had a compromise immune computer, just leave your key there and avoid the pointless ritual.

Bitcoin has multisignature which allows split keys without any single point of failure. Anyone considering secret sharing should first have a darn good reason they aren't using multisig.
Thanks for input. I know binaries are not really recommended to download without proper testing and investigation., but I thought virustotal could help out. So, I put the linux binary here to make it more convenient. But I hear you. Who knows what the binary is really doing, right? Well, I totally understand. Go ahead and use the source code. Since I'm using Go, building isn't much of a problem anyway really.

This was just a tool I thought could be handy, and yes, that link pretty much does the same, but here you get a local binary, and also, it generates words (you can also provide your own wordlist to make it even more secure, but you have to use the same again to get the secret back), so it's a bit easier not to mistype. I'm providing another local, offline option. And actually, I did have in mind to also enable web server there (since it's made in Go its easy) and also expand and make a nice GUI for it.

You could print this on paper, cut it up by the shares and different shares in different locations. Nobody would ever know how many would be needed. And maybe not even understand what those random words were for.

But sure, please do use multisig instead. This was just a fun little thing I created. I did actually noticed that you could see part of the secret, depending on what little was changed, but I suppose that is how the algorithm works.