good chemistry is complicated, and a little bit messy LW 

PerlMonks 
Comment on 
( #3333=superdoc: print w/replies, xml )  Need Help?? 
Right, that's exactly the point, although I should have made it more explicit. The last chunk must contain as much information as the entire original message. But since any chunk could be the "last chunk," all chunks have to be at least as large as the original message.
But they needn't be the same size (well, depending on how you look at it). In some RSA threshold signatures, the secret key d is split into random integers within a range of {A, ..., A} (for some A much bigger than the valid range of d) so that all the shares add up to d. Some shares may certainly be much smaller than others, and you could store them in fewer bits. But the fact that each key could be as large as A means you have no information about the secret key by knowing all but one share  the last share could be large enough that adding it onto the current sum can yield every valid choice of d with equal probability. However, if a participant publicly announced that his share of the secret could be stored in a very small number of bits, you may be able to get information about the secret if you have all the shares but his  you may know that the secret d must lie in a smaller range of valid choices. blokhead In reply to Re: Re: Re: Bitwise File Shredding
by blokhead

