Files
zeekayandHanzo Dev 286d97cee3 proofs/fhe: custody of the threshold-FHE lane
t-of-n custody: no member and no coalition below t holds or can reconstruct
the FHE secret key, across key generation and decryption. Reduces to RLWE,
Shamir privacy at degree t-1, and the scheme's smudging bound.

Correctness is separate and conditional: recombination is exact only on
quorums whose Lagrange coefficients are integers. States the measured
failure of clearing that denominator with a modular inverse, and the
earlier full-key-per-party construction, as the counterexamples they are.

Records which secret sharing the scheme uses and why it is not the one the
signature schemes use.

Co-authored-by: Hanzo Dev <[email protected]>
2026-09-17 13:27:16 -07:00
..