Distributed certification application via a trusted dealer.
Distributed certification via threshold cryptography is much more secure than other ways to protect certification authority (CA)'s private key, and can tolerate some intrusions. As the original system such as ITTC, etc., is unsafe, inefficient and impractical in actual network environment, this paper brings up a new distributed certification scheme, which although it generates key shares concentratively, it updates key shares distributedly, and so, avoids single-point failure like ITTC. It not only enhances robustness with Feldman verification and SSL protocol, but can also change the threshold (t, k) flexibly and robustly, and so, is much more practical. In this work, the authors implement the prototype system of the new scheme and test and analyze its performance.
Liu
Duan-yang
DY
Department of Computer, Zhejiang University, Hangzhou 310027, China. ldy_zj@hotmail.com
Pan
Xue-zeng
XZ
Ping
Ling-di
LD
D000465:Algorithms; D016494:Computer Security; D003199:Computer Systems; D007256:Information Systems; D008962:Models, Theoretical; D012984:Software