Divorce dizzy doctor and entropy size about seedsplit HOT 4 CLOSED

Hey, thanks for the feedback

1. That's right, the first bytes of the shard encodes the number of the shard, so it will always be the same or similar
2. In most implementations of sss this is not the case, and I do not intend to do my own implementation
3. Hm, yes this is probably because of the lenght!

from seedsplit.

Hi Joel,

If you remove the number of the shard, would it make the sharded key the same length? Why do we need the shard number anyway? As far as I know, the shards can be used in any order. I can think of several advantages that this would provide if it works:

1. Convenience: ability to use tools like cryptosteel mnemonic or generally anything else designed for a standard mnemonic phrase or entropy format
2. Security: a thief who encounters a shard might look at it and think: "Aha, 'divorce', that's probably seedsplit used, let's look for more shards!"
3. Plausible deniability: One might use a single shard as a wallet key and keep a small sum of money on it. If he is then unwillingly forced to reveal his key he can hand over this single shard, then deny that there are other shards and insists that it is all the money he has.
4. Split shards even further to create a more complex scheme of trust. I.e. I will be able to share the shards between groups (several people from several groups) so that several shards are required to restore the original seed but members from a single group cannot do it alone and would require a cooperation from another group. I admit that's a rare use case but there might be more common that I just can't imagine right now.

from seedsplit.

I'm not sure if it will work. If you decide to play around with it, let me know!
Also, I'm planning on switching to this sss library in the future.

from seedsplit.

Because the issue is actually in the underlying library, I suggest to close it here, at least for now. Thank you!

from seedsplit.