Re: Secret Sharing

Jamie Riden <[email protected]> Thu, 1 Aug 2013 17:01:34 +0100
Newsgroups gmane.comp.security.web-applications
Message-ID <CAHno4i-oUPDkCiz=kjSo3WKh6x7mOOQXvNt_6Wp==v8EeScgWw@mail.gmail.com>
The answer is, I can't think of a better way of doing it. I believe
this is how EFS, etc. work - you have a single symmetric encryption
key and you encrypt this with the public key of anyone who you want to
be able to read the file.

But it's been a while since I read up on this, so I suggest you do a
sanity check.

cheers,
 Jamie

On 1 August 2013 15:48, saghar estehghari <[email protected]> wrote:
> Hi,
>
> I'm working on a project which involves security of the cloud data.
>
> The scenario is as follows:
>
> Users A and B have registered to a cloud service (cloud assumed to be
> semi-trusted). A and B both have secret keys (KA and KB) (for
> symmetric encryption) and public keys (PKA and PKB) on the cloud
> server. KA and KB are each encrypted with the passwords of A and B.
>
> Now consider A wants to share a file F that is encrypted with key K (K
> is generate randomly by A). Now K should be shared securely with B
> over the cloud (we consider that B is not online at the time of
> sharing). To do this one option would be encrypting K with PKB which
> should be decrypted by B when he gets online. However this option
> seems to be complicated for my client.
>
> I was wondering whether you have better options in mind that could help me.
> Please let me know if the explantation is not clear.
>
> Thanks
>
>
>
> This list is sponsored by Cenzic
> --------------------------------------
> Let Us Hack You. Before Hackers Do!
> It's Finally Here - The Cenzic Website HealthCheck. FREE.
> Request Yours Now!
> http://www.cenzic.com/2009HClaunch_Securityfocus
> --------------------------------------
>



-- 
Jamie Riden / [email protected] / [email protected]
http://uk.linkedin.com/in/jamieriden



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------