Re: Shamir's Secret Sharing Scheme integration?

2010-02-22 Thread Stefan Xenon
Hi Richard,
I don't know any integration in GnuPG but instead the following open
source implementatio may worth a try: http://point-at-infinity.org//

Regards
Stefan

Am 21.02.2010 14:40, schrieb Richard Geddes:
 Hello,
 
 Is there a utility that integrates gnupg with  (Shamir's Secret
 Sharing Scheme)?   And maybe using smartcards?  If not has anyone seen a
 HowTo that shows how to integrate them?
 
 Richard
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Shamir's Secret Sharing Scheme integration?

2010-02-22 Thread Florian Weimer
* Stefan Xenon:

 I don't know any integration in GnuPG but instead the following open
 source implementatio may worth a try: http://point-at-infinity.org//

IIRC, this particular software does not implement Shamir's scheme.

-- 
Florian Weimerfwei...@bfk.de
BFK edv-consulting GmbH   http://www.bfk.de/
Kriegsstraße 100  tel: +49-721-96201-1
D-76133 Karlsruhe fax: +49-721-96201-99

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Shamir's Secret Sharing Scheme integration?

2010-02-22 Thread Werner Koch
On Sun, 21 Feb 2010 14:40, rich.ged...@verizon.net said:

 Is there a utility that integrates gnupg with  (Shamir's Secret
 Sharing Scheme)?   And maybe using smartcards?  If not has anyone seen
 a HowTo that shows how to integrate them?

I don't know of a complete solution but Phil Sutter wrote his master
thesis on this.  See

  http://lists.gnupg.org/pipermail/gnupg-devel/2008-July/024506.html

The code is at:

  http://nwl.cc/cgi-bin/git/gitweb.cgi?p=ssd.git;a=summary



Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Shamir's Secret Sharing Scheme integration?

2010-02-22 Thread Dan Mahoney, System Admin

On Sun, 21 Feb 2010, Richard Geddes wrote:


Hello,

Is there a utility that integrates gnupg with  (Shamir's Secret Sharing 
Scheme)?   And maybe using smartcards?  If not has anyone seen a HowTo that 
shows how to integrate them?


Ikinda do.

I encoded my will with it before some surgery a few years ago, and 
documented it in the process, along with some other notes on short 
circuiting the whole thing.


Have a look at www.gushi.org/willworks.txt

-Dan

--

Dan Mahoney
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Site:  http://www.gushi.org
---


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Shamir's Secret Sharing Scheme integration?

2010-02-22 Thread Richard Geddes

Thanks for all the input...  good stuff.

I can think of a bash script that

- generates the passphrase (using /dev/urandom) for a gnupg private key,
- pipe the random passphrase into  to generate the shares, threshold 
(s,t),
- and every time the passphrase is needed, combine t shares to recreate 
the original random passphrase.


A problem I see with this approach is that an attacker can easily modify 
the script  to output the shares... breaking confidentiality.


Even binary code can be reverse-compiled and re-engineered to spill the 
secrets.


Does anyone know of techniques to protect code from being reverse 
engineered with standard off the shelf techniques...? 


Thanks

Richard Geddes wrote:

Hello,

Is there a utility that integrates gnupg with  (Shamir's Secret 
Sharing Scheme)?   And maybe using smartcards?  If not has anyone seen 
a HowTo that shows how to integrate them?


Richard

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users




___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Shamir's Secret Sharing Scheme integration?

2010-02-22 Thread Florian Weimer
* Roscoe:

 On Mon, Feb 22, 2010 at 7:32 PM, Florian Weimer fwei...@bfk.de wrote:
 * Stefan Xenon:

 I don't know any integration in GnuPG but instead the following open
 source implementatio may worth a try: http://point-at-infinity.org//

 IIRC, this particular software does not implement Shamir's scheme.

 And what makes you  think that?

The existence of the -D option.

-- 
Florian Weimerfwei...@bfk.de
BFK edv-consulting GmbH   http://www.bfk.de/
Kriegsstraße 100  tel: +49-721-96201-1
D-76133 Karlsruhe fax: +49-721-96201-99

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users