I read about this algorithm when playing with Hashicorp's vault. Very elegant solution to a problem.

[1] https://www.vaultproject.io/docs/concepts/seal.html