+/*----- Notes on the system -----------------------------------------------*
+ *
+ * This uses a variant of Shamir's secret sharing system. Shamir's original
+ * system used polynomials modulo a large prime. This implementation instead
+ * uses the field %$\gf(2^8)$%, represented by
+ *
+ * %$\gf(2)[x]/(x^8 + x^4 + x^3 + x^2 + 1)$%
+ *
+ * and shares each byte of the secret independently. It is therefore limited
+ * to 255 players, although this probably isn't a serious limitation in
+ * practice.
+ *
+ * Share creation and reconstruction is extremely efficient. Contrast the
+ * performance of the straightforward implementation based on multiprecision
+ * arithmetic.
+ */
+