retitle 556939 libgfshare-bin: can produce broken shares containing foo.000
tags 556939 confirmed
forwarded 556939 dsilv...@digital-scurf.org
thanks

A modified version of your test case eventually failed for me: in the first
run it failed after 157 split/recombine attempts, and in the second run it
failed after 527 attempts.

One thing that the two failures had in common is that component x.000 was
produced and was used to remake the share; with the default 3-of-5 setting,
this can be expected to happen in around 2% of calls to gfsplit.

The mathematics of Shamir secret sharing do not work correctly with x_i = 0,
i.e. a component foo.000, so the library should reject any sharenrs array
that contains 0, and the utilities should not produce such arrays. I'll
prepare a patch this evening.

Daniel, do you agree with this diagnosis?

Thanks,
    Simon

Attachment: argh.sh
Description: Bourne shell script

Attachment: signature.asc
Description: Digital signature

Reply via email to