Key escrow n strings such that any m can be used to regenerate the session master key
Key escrow n strings such that any m can be used to regenerate the session master key
Transcript
[slide411] Well, it turns out you can generalize this, using something called Shamir secret sharing. And here the idea is that I can actually split the key into multiple pieces, and now I can choose, for instance, any three out of five. So the result is I have to receive three keys from any of my five escrow agents, and now I can recover the key. What's the advantage here? Even if one of the escrow agents goes out of business, I didn't lose access to the master keys. It also means the speed with which I can get them is the speed of getting the three fastest answers.