GenerateRandomSearch

Secret Sharing Generator

Shamir's scheme rests on one fact: two points determine a line, three determine a parabola, and k points determine a polynomial of degree k−1. Hide the secret as the constant term, hand out points, and any k of them rebuild it while k−1 leave every value equally possible. This issues the shares and then reconstructs from every single combination of the threshold. These parameters are far too small to protect anything and are chosen so the arithmetic can be followed by hand. This is a teaching demonstration, not a security tool — real work belongs in a reviewed cryptographic library.

What this generator does

Hides the secret as the constant term of a random polynomial over a small prime field, issues one point per share, and then reconstructs by Lagrange interpolation from every combination of exactly the threshold.

How to use this tool

  1. Choose a secret between 0 and 60.
  2. Set how many shares to issue and how many are needed.
  3. Read the shares — each is a point on a hidden polynomial.
  4. Check the note: every combination of the threshold was tried.

Understanding the controls

Secret
A number below 61, the prime this works over. Everything is done in modular arithmetic so the shares reveal nothing about the size of the secret.
How many shares
Between 2 and 8 people each receive one point on the hidden polynomial.
Threshold
How many are needed. Fewer than this leave the secret genuinely undetermined, not merely hard to guess.
Seed
Reproduces the same polynomial, which is useful for teaching and useless for secrecy.

Common use cases

  • Demonstrating threshold secret sharing with numbers you can check
  • Teaching why k points determine a polynomial of degree k−1
  • Producing worked examples for a cryptography or algebra class
  • Showing what information-theoretic security actually means
  • Generating share sets for a puzzle or escape-room exercise

How this generator works

A random polynomial of degree one less than the threshold is built with the secret as its constant term, and each share is that polynomial evaluated at a different point. Lagrange interpolation at zero recovers the constant term from any k points. Working modulo a prime is what makes it secure rather than merely awkward: with k−1 shares, every possible secret still has exactly one polynomial fitting the points, so nothing at all is leaked. Before display every combination of the threshold is reconstructed, and all must return the secret.

Randomness and fairness

Uses your browser's cryptographic random source for the polynomial coefficients by default. A seed switches to a reproducible sequence, which is deterministic and not cryptographically secure. These parameters are far too small to protect anything and are chosen so the arithmetic can be followed by hand. This is a teaching demonstration, not a security tool — real work belongs in a reviewed cryptographic library.

For how randomness is produced across the whole site, see how Generate Random works.

Limitations and good to know

  • The prime field is tiny, so a secret here is a number below 61 rather than a real key — real implementations use large fields and split bytes.
  • Shares are not authenticated, so a participant who supplies a wrong share silently corrupts the reconstruction.
  • The scheme protects confidentiality, not availability: losing more than the spare shares makes the secret unrecoverable forever.
  • This demonstrates the mathematics and should not be used to split anything that matters.

Privacy and your data

Shares are generated in your browser and never transmitted, stored or included in analytics.

Related generators