Utilizing error correction for secure secret sharing
Utilizing error correction (ECC) for secure secret sharing includes computing an encrypted key using a key and a number of random values, computing, based on a first ECC scheme, a key ECC for the encrypted key and the random values, and storing a number of key fragments on a number of storage servers, the number of key fragments includes the encrypted key, the random values, and the key ECC.
1. A method comprising:
computing an encrypted key from a key and from a plurality of random values;
calculating encrypted key reconstruction data for the encrypted key and random value reconstruction data for the random values;
splitting the encrypted key, the encrypted key reconstruction data, the plurality of random values, and the random value reconstruction data into a plurality of key fragments;
storing the plurality of key fragments on a plurality of storage servers, the encrypted key reconstruction data enabling the encrypted key to be reconstructed from a threshold number of the storage servers, and the random value reconstruction data enabling the random values to be reconstructed from the threshold number of the storage servers; and
reconstructing an encrypted object, the encrypted key, and the random values from the threshold number of the storage servers.
2. The method of claim 1 , further comprising:
computing an encrypted object with the key;
calculating object reconstruction data for the encrypted object; and
storing a plurality of object fragments on the number of storage servers, the plurality of object fragments comprising the encrypted object and the object reconstruction data.
3. The method of claim 2 , comprising:
receiving an object;
wherein computing the encrypted object comprises encrypting the object with the key, the key randomly chosen using a high entropy random number generator; and
the object reconstruction data enabling the encrypted object to be reconstructed from the threshold number of the storage servers.
4. The method of claim 1 , comprising:
selecting the number of random values using a high entropy random number generator, the number of random values being the same length as the key;
computing, based on the random values and the key, an exclusive or (XOR) cipher to create the encrypted key; and
concatenating the encrypted key reconstruction data to the encrypted key.
5. The method of claim 1 in which reconstructing the encrypted object, the encrypted key, and the random values from the threshold number of the storage servers comprises:
reconstructing the encrypted object from a number of object fragments from the threshold number of the storage servers;
reconstructing the encrypted key from a number of the key fragments from the threshold number of the storage servers;
reconstructing the random values from a number of the key fragments from the threshold number of the storage servers;
decrypting, based on the encrypted key and the random values, the encrypted key to obtain the key; and
decrypting the encrypted object using the key to obtain an object.
6. A system comprising:
a processor; and
a non-transitory computer readable storage medium comprising instructions executable by the processor to:
compute an encrypted key from a key and from a number of random values;
calculate encrypted key reconstruction data for the encrypted key and random value reconstruction data for the random values;
split the encrypted key, the encrypted key reconstruction data, the number of random values, and the random value reconstruction data into a plurality of key fragments;
store the plurality of key fragments on a plurality of storage servers, the encrypted key reconstruction data enabling the encrypted key to be reconstructed from a threshold number of the storage servers, and the random value reconstruction data enabling the random values to be reconstructed from the threshold number of the storage servers; and
reconstruct an encrypted object, the encrypted key, and the random values from the threshold number of the storage servers.
7. The system of claim 6 , wherein the instructions are executable by the processor to:
compute an encrypted object with the key;
calculate object reconstruction data for the encrypted object;
store a plurality of object fragments on the number of storage servers, the plurality of object fragments comprising the encrypted object and the object reconstruction data; and
reconstruct the encrypted object, the encrypted key, and the random values from the threshold number of the storage servers.
8. The system of claim 7 , wherein the instructions are executable by the processor to:
receive an object;
encrypt the object with the key to compute the encrypted object, the key randomly chosen using a high entropy random number generator; and
the object reconstruction data enabling the encrypted object to be reconstructed from the threshold number of the storage servers.
9. The system of claim 6 , wherein the instructions are executable by the processor to:
select the number of random values using a high entropy random number generator, the number of random values being the same length as the key;
compute, based on the random values and the key, an exclusive or (XOR) cipher to create the encrypted key; and
concatenate the encrypted key reconstruction data to the encrypted key.
10. The system of claim 6 , wherein the instructions are executable by the processor to:
reconstruct an encrypted object from a number of object fragments from the threshold number of the storage servers;
reconstruct the encrypted key from a number of key fragments from the threshold number of the storage servers;
reconstruct the random values from a number of the key fragments from the threshold number of the storage servers;
decrypt, based on the encrypted key and the random values, the encrypted key to obtain the key; and
decrypt the encrypted object using the key to obtain an object.
11. A non-transitory computer readable storage medium comprising instructions executable by a processor to:
compute an encrypted key from a key and from a number of random values;
calculate encrypted key reconstruction data for the encrypted key and random value reconstruction data for the random values;
split the encrypted key, the encrypted key reconstruction data, the number of random values, and the random value reconstruction data into a plurality of key fragments;
store the plurality of key fragments on a plurality of storage servers, the encrypted key reconstruction data enabling the encrypted key to be reconstructed from a threshold number of the storage servers, and the random value reconstruction data enabling the random values to be reconstructed from the threshold number of the storage servers; and
reconstruct an encrypted object, the encrypted key, and the random values from the threshold number of the storage servers.
12. The non-transitory computer readable storage medium of claim 11 , wherein the instructions are executable by the processor to:
compute an encrypted object with the key;
calculate object reconstruction data for the encrypted object; and
store a plurality of object fragments on the number of storage servers, the plurality of object fragments comprising the encrypted object and the object reconstruction data.
13. The non-transitory computer readable storage medium of claim 12 , wherein the instructions are executable by the processor to reconstruct the encrypted object, the encrypted key, and the random values from the threshold number of the storage servers.
14. The non-transitory computer readable storage medium of claim 12 , wherein the instructions are executable by the processor to:
receive an object;
encrypt the object with the key to compute the encrypted object, the key randomly chosen using a high entropy random number generator; and
the object reconstruction data enabling the encrypted object to be reconstructed from the threshold number of the storage servers.
15. The non-transitory computer readable storage medium of claim 11 , wherein the instructions are executable by the processor to:
select the number of random values using a high entropy random number generator, the number of random values being the same length as the key;
compute, based on the random values and the key, an exclusive or (XOR) cipher to create the encrypted key;
concatenate the encrypted key reconstruction data to the encrypted key.
16. The non-transitory computer readable storage medium of claim 13 , wherein the instructions are executable by the processor to:
reconstruct the encrypted object from a number of object fragments from the threshold number of the storage servers;
reconstruct the encrypted key from a number of key fragments from the threshold number of the storage servers;
reconstruct the random values from a number of the key fragments from the threshold number of the storage servers;
decrypt, based on the encrypted key and the random values, the encrypted key to obtain the key; and
decrypt the encrypted object using the key to obtain an object.