[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#451355: ITP: libgfshare -- library and utilities for multi-way secret sharing



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Package: wnpp
Severity: wishlist
Owner: Simon McVittie <smcv@ianadd.pseudorandom.co.uk>


* Package name    : libgfshare
  Version         : 1.0.2+bzr20070822
  Upstream Author : Daniel Silverstone <dsilvers@digital-scurf.org>
* URL             : http://www.digital-scurf.org/software/libgfshare
* License         : MIT
  Programming Lang: C
  Description     : library and utilities for multi-way secret sharing

 This library implements Shamir's method for secret sharing, which can be
 used to split a secret (like a GPG secret key) into multiple parts, so that
 at least some number of those parts are needed to recover the original file,
 but any smaller combination of parts is useless to an attacker.
 .
 For instance, you might split a GPG key using a 3-of-5 share and put one
 share on each of three computers, and two shares on a USB memory stick; then
 you can use the GPG key on any of those three computers using the memory
 stick, but if the memory stick is lost, you can recover the key by
 bringing the three computers together.

As well as a set of library packages, I intend to package the gfsplit and
gfcombine command-line utilities as a binary package gfshare-utils.
I'm in contact with the upstream author, and have asked him to release
current bzr as 1.0.3, but until then I'm going to package what's in bzr.

If anyone's interested: I have vague plans to write a FUSE filesystem that
works like a cross between gfcombine and unionfs, and the upstream author has
told me that Søren Hansen <http://warma.dk/blog/> has similar plans.

Packaging in progress: http://bzr.debian.org/~smcv-guest/bzr/libgfshare
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: OpenPGP key: http://www.pseudorandom.co.uk/2003/contact/ or pgp.net

iD8DBQFHPBlFWSc8zVUw7HYRAn3OAKDi2iX/nIW7bRmgkci/J2qVP7w49ACgslX7
iYrFI4psVNiHb81bVGjBbIY=
=QFEv
-----END PGP SIGNATURE-----




Reply to: