pull down to refresh

Shamir's Secret Sharing is not foolproof. Read this Bitcoin Wiki article: https://en.bitcoin.it/wiki/Shamir_Secret_Snakeoil

TLDR: SSS is very difficult to do correctly. Use multi-sig instead.

reply

Wow thats surprising considering trezor is willing to offer a product that supports it. Seems like that would be devastating if it didnt work for their reputation. Thanks ill give this a review.

reply

Use Blockchain Commons materials and software.

https://github.com/BlockchainCommons/bc-shamir

I'd agree usual multisig might be better.

reply

Shamir is a great tool for securing one seed. For loss prevention.
Or you can have three holders of 2/3 shamir shares. But to sign the transaction you need to collect at least two of them.. And once you have them you can sign whatever you want.. So is it question of trust between of 3 of you? → multisig. Otherwise shamir. But I guess that for will be better to use multisig.

You can still use shamir to secure your seed part of the multisig.
You can even use so called super shamir for more complicated structures.

reply

At first glance it looks a little complex

Passphrase+ seed or Multisig might be a lot easier

reply

Im thinking it would be easy for the treasurer in a small business to control the wallet, then you split up the pass phrase shares between principled persons or lawyer...so you can collaborate to restore the wallet but dont need to worry about one person or employee stealing the funds.

reply

Shamir is a (great) recovery technique. You set up to the shares once and distribute them however you see fit.

You can multisig on top of it.

I give example of Shamir use case in another thread: #78455

reply

Sorry, my point was, multisig and Shamir slove different problems.

reply

Multisig allows signers to remain geographically distributed.

Shamirs results in the key being present at a single location during signing, which provides an opportunity for someone to steal it.

Usually multisig is probably better for a treasury.

reply