Paper 2018/1147

Stronger Leakage-Resilient and Non-Malleable Secret-Sharing Schemes for General Access Structures

Divesh Aggarwal, Ivan Damgard, Jesper Buus Nielsen, Maciej Obremski, Erick Purwanto, Joao Ribeiro, and Mark Simkin


In this work we present a collection of compilers that take secret sharing schemes for an arbitrary access structures as input and produce either leakage-resilient or non-malleable secret sharing schemes for the same access structure. A leakage-resilient secret sharing scheme hides the secret from an adversary, who has access to an unqualified set of shares, even if the adversary additionally obtains some size-bounded leakage from all other secret shares. A non-malleable secret sharing scheme guarantees that a secret that is reconstructed from a set of tampered shares is either equal to the original secret or completely unrelated. To the best of our knowledge we present the first generic compiler for leakage-resilient secret sharing for general access structures. In the case of non-malleable secret sharing, we strengthen previous definitions, provide separations between them, and construct a non-malleable secret sharing scheme for general access structures that fulfills the strongest definition with respect to independent share tampering functions. More precisely, our scheme is secure against concurrent tampering: The adversary is allowed to (non-adaptively) tamper the shares multiple times, and in each tampering attempt can freely choose the qualified set of shares to be used by the reconstruction algorithm to re-construct the tampered secret. This is a strong analogue of the multiple-tampering setting for split-state non-malleable codes and extractors. We show how to use leakage-resilient and non-malleable secret sharing schemes to construct leakage-resilient and non-malleable threshold signatures. Classical threshold signatures allow to distribute the secret key of a signature scheme among a set of parties, such that certain qualified subsets can sign messages. We construct threshold signature schemes that remain secure even if an adversary leaks from or tampers with all secret shares.

Note: Added acknowledgments, some references, and an appendix for completeness.

Available format(s)
Cryptographic protocols
Publication info
A major revision of an IACR publication in CRYPTO 2019
Non-malleable secret sharingLeakage-resilient secret sharingNon-malleable extractors
Contact author(s)
divesh @ comp nus edu sg
ivan @ cs au dk
jbn @ cs au dk
obremski math @ gmail com
erickp @ comp nus edu sg
j lourenco-ribeiro17 @ imperial ac uk
simkin @ cs au dk
2020-05-29: last of 2 revisions
2018-12-03: received
See all versions
Short URL
Creative Commons Attribution


      author = {Divesh Aggarwal and Ivan Damgard and Jesper Buus Nielsen and Maciej Obremski and Erick Purwanto and Joao Ribeiro and Mark Simkin},
      title = {Stronger Leakage-Resilient and Non-Malleable Secret-Sharing  Schemes for General Access Structures},
      howpublished = {Cryptology ePrint Archive, Paper 2018/1147},
      year = {2018},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.