[tromp]

This is also the essence behind Shamir's Secret Sharing where the sample at x=0 is a secret shared by k+t parties any k of which can recover the secret.

[1] https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing