A Distributed Secret Sharing Protocol (DSSP) enables a dealer to distribute multiple secrets among a set of users by placing shares on storage nodes scattered across a public network, so that each user can reconstruct exactly one secret by accessing its designated nodes. Two security notions are considered: weak secrecy, which prevents a user from learning any other individual secret, and perfect secrecy, which prevents a user from gaining any information about the collection of all other secrets. We study perfectly-secure graph-based DSSPs, where each user accesses exactly two storage nodes. We determine the exact optimal storage overhead for trees, stars, paths, cycles, and complete graphs, and provide matching constructions. For arbitrary graphs, we present a decomposition construction that uses protocols on simpler subgraphs as building blocks. Our results show that perfect secrecy has no additional storage cost over weak secrecy for acyclic graphs, while it strictly increases the overhead for graphs containing cycles.

Perfectly-Secure Graph-Based Distributed Secret Sharing Protocols

Alfredo De Santis;Barbara Masucci
2026

Abstract

A Distributed Secret Sharing Protocol (DSSP) enables a dealer to distribute multiple secrets among a set of users by placing shares on storage nodes scattered across a public network, so that each user can reconstruct exactly one secret by accessing its designated nodes. Two security notions are considered: weak secrecy, which prevents a user from learning any other individual secret, and perfect secrecy, which prevents a user from gaining any information about the collection of all other secrets. We study perfectly-secure graph-based DSSPs, where each user accesses exactly two storage nodes. We determine the exact optimal storage overhead for trees, stars, paths, cycles, and complete graphs, and provide matching constructions. For arbitrary graphs, we present a decomposition construction that uses protocols on simpler subgraphs as building blocks. Our results show that perfect secrecy has no additional storage cost over weak secrecy for acyclic graphs, while it strictly increases the overhead for graphs containing cycles.
2026
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11386/4955576
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus ND
  • ???jsp.display-item.citation.isi??? ND
social impact