Re: [freehaven-dev] universally verifiable secret sharing

[Joseph Sokol-Margolis <seph@MIT.EDU>]

> * universal verification : _anyone_, not just the parties involved
> 	                  in the original sharing, can verify 
>                           whether a given share is "valid." 

In the system Roger and talked about, this was mostly done. Each piece
of data contained, in addition to the data, the owner (a mix-net
address), a public key, and a signiture.

This reduces the problem of verfication to verification that the key
contained is the correct one. You could further reduce it, by not
containing a public key, and assuming pk servers. (though this has the
disadvantage of limiting each mix address to a given key)

seph