ShamirSharing
CipherLab
◐
EN
?
f(x) = s + a₁x (mod 13)
n
s = f(0)
a₁
f(x) = s + a₁x + a₂x² (mod p)
p
7
11
13
17
19
23
k
n
s = f(0)
x
mod p
xᵢ
yᵢ
Πxⱼ
Π(xⱼ−xᵢ)
λᵢ(0)
λᵢ(0)yᵢ
k
n