DMCA
Distributing Security-Mediated PKI (2004)
Cached
Download Links
| Venue: | In 1st European PKI Workshop Research and Applications |
| Citations: | 6 - 2 self |
BibTeX
@INPROCEEDINGS{Vanrenen04distributingsecurity-mediated,
author = {Gabriel Vanrenen and Sean Smith},
title = {Distributing Security-Mediated PKI},
booktitle = {In 1st European PKI Workshop Research and Applications},
year = {2004},
pages = {218},
publisher = {Springer-Verlag}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Abstract. The SEM approach to PKI (by Boneh et al [4]) offers many advantages, such as instant revocation and compatibility with standard RSA tools. However, it has some disadvantages with regard to trust and scalability: each user depends on a mediator that may go down or become compromised. In this paper, we present a design that addresses this problem. We use secure coprocessors linked with peer-to-peer networks, to create a network of trustworthy mediators, to improve availability. We use threshold cryptography to build a back-up and migration technique, to provide recovery from a mediator crashing while also avoiding having all mediators share all secrets. We then use strong forward secrecy with this migration, to mitigate the damage should a crashed mediator actually be compromised. We also discuss a prototype implementation of this design. 1
