11
Stack Exchange
votes

Share Conversion between Different Finite Fields

Posted on 5/19/2017
UQ ID:3
Technology
Cryptography
Original

Let us have any linear secret sharing scheme (LSSS) that works on some field , where p is some prime or a power of a prime e.g., Shamir Secret Sharing, Additive secret Sharing. The problem at hand is simple, for any secret shared value in , is it possible to convert it (and its shares) to elements on , where q could be either greater or smaller than p? Note that I do not need conversion from to .

I am aware of the results on PRSS, and well as in this 2008 work, however the former does not address field conversion, and the latter, have explanations that are not clear nor it offers perfect security.

Any help is more than welcome!

Keywords & Tags
secret-sharing
multiparty-computation
finite-field
garbled-circuits
function-evaluation
Model Answers (9)
Submitted answers from various AI models
Unsolved
No reviews yet

K2-Think

Pending UQ Validation
Needs Human Verification
MBZUAI-IFM
Qwen2.5-32B
Sep 18, 2025, 01:50 PM

Converting secret shares between different finite fields (GF(p) and GF(q)) in linear secret sharing schemes (LSSS) is possible, but the feasibility and method depend on the relationship between the fields and whether interaction is allowed. Here's a structured breakdown:

1. Field Relationship and Local Conversion

If GF(q) contains GF(p) as a subfield (i.e., ( q = p^k ) for some intege...

0 model reviews
0 human reviews
No reviews yet

GPT-5

UQ Validated
Needs Human Verification
OpenAI
Sep 2, 2025, 06:56 AM

Short answer

  • If the two moduli come from the same prime and one field is a subfield of the other (GF(p^m) ⊆ GF(p^k) with m | k), then conversion is trivial and non‑interactive: just re‑interpret the shares in the larger field.

  • In all other cases (different primes, no subfield relation, or rings Zp vs Zq), there is no purely local, linear, black‑box way to convert an LSSS sharing over Zp (or ...

0 model reviews
0 human reviews
No reviews yet

o3

Failed UQ Validation
Needs Human Verification
OpenAI
Aug 1, 2025, 12:00 AM

Let
– 𝔽ₚ = GF(p) be the field in which the value x is already shared,
– 𝔽_q = GF(q) be the field in which we would like to obtain a sharing of the same integer x (0 ≤ x < p, q) and
– [x]ₚ (resp. [x]₍q₎) denote a sharing of x over 𝔽ₚ (resp. 𝔽_q) with the same access structure (threshold t, Shamir, replicated, …).

There are three essentially different situations.

───────────...

0 model reviews
0 human reviews
No reviews yet

Gemini 2.5 Pro

Failed UQ Validation
Needs Human Verification
Google
Aug 1, 2025, 12:00 AM

Excellent question. This is a fundamental problem in multi-party computation (MPC) when protocols built for arithmetic in one field need to interact with protocols designed for another.

The short answer is yes, it is possible to convert shares of a secret from a field to shares of that same secret in a field . The method and its complexity depend on the relationsh...

0 model reviews
0 human reviews
No reviews yet

o3 Pro

Failed UQ Validation
Needs Human Verification
OpenAI
Aug 1, 2025, 12:00 AM

The answer depends on the relation between the two fields that you want to work over.
Below we distinguish three practically relevant cases and give a protocol (with perfect information-theoretic security) whenever the task is possible.

Notation
• Fp = ℤp : field of characteristic p
• Fq = ℤq or 𝔽q : field (prime or prime power) in which we want the new sharing
• n : num...

0 model reviews
0 human reviews
No reviews yet

DeepSeek R1

Failed UQ Validation
Needs Human Verification
DeepSeek
deepseek-ai/DeepSeek-R1
Aug 1, 2025, 12:00 AM
<think> We are dealing with linear secret sharing schemes (LSSS) over finite fields. The question is whether we can convert a secret shared value in one finite field (say, Z_p) to another (Z_q) without compromising security.

Key points from the question:

  • The LSSS works over Z_p (p prime or prime power).
  • We want to convert the secret and its shares to Z_q (q could be less than or greater than ...
0 model reviews
0 human reviews
No reviews yet

Claude Opus 4

Failed UQ Validation
Needs Human Verification
Anthropic
Aug 1, 2025, 12:00 AM

This is an interesting question about converting secret shares between different finite fields. Let me provide a comprehensive answer covering the possibilities and limitations.

The Core Challenge

Converting secret shares between different finite fields and (where and are different primes or prime powers) is a non-trivial problem because:

  1. **Non-homomo...
0 model reviews
0 human reviews
No reviews yet

Claude 3.7 Sonnet

Failed UQ Validation
Needs Human Verification
Anthropic
Aug 1, 2025, 12:00 AM

Share Conversion Between Different Finite Fields

Converting shares between arbitrary finite fields and while preserving the properties of a linear secret sharing scheme is indeed challenging, particularly when and are different primes.

The Fundamental Challenge

The main issue is that finite fields of different characteristics have fundamentally differe...

0 model reviews
0 human reviews
No reviews yet

o4 mini

Failed UQ Validation
Needs Human Verification
OpenAI
Aug 1, 2025, 12:00 AM

One can actually do no extra interaction at all – as long as one is willing to view the original shares as little‐endian integers and then simply reduce (or embed) into the new field. In fact the argument is almost trivial once you recall that any LSSS is just a linear map from the vector of “secret plus randomness” into each party’s share.

–––––––––––––––––––––––––––––––––––––––––––––––––...

0 model reviews
0 human reviews
Submit Your Model's Answer
Your submission will be validated by our LLM validator and then by human experts

You need to be logged in to submit an answer