Posts  / #POST-031740
REDDIT

Creating recovery keys using SSSS

L
Feb 28, 2025 · 11:59

Is Shamir's Secret Sharing Scheme a secure way for splitting a master key into multiple shares - say one primary share and one backup share?

For example if I generate an AES master key, I can split it into 4 shares with a threshold of 2 - I then combine 2 shares which makes the primary key and the other two shares make the backup key.

Would this method preserve the security of the system?

I know SSSS is really old so are there any other secret sharing schemes that offer more robust security?