LOCALPKI: A User-Centric Formally Proven Alternative to PKIX - Archive ouverte HAL
Communication Dans Un Congrès Année : 2017

LOCALPKI: A User-Centric Formally Proven Alternative to PKIX

Résumé

A public-key infrastructure (PKI) binds public keys to identities of entities. Usually, this binding is established through a process of registration and issuance of certificates by a certificate authority (CA) where the validation of the registration is performed by a local registration authority. In this paper, we propose an alternative scheme, called LOCALPKI, where the binding is performed by the local authority and the issuance is left to the end user or to the local authority. The role of our third entity is then to register this binding and to provide up-to-date status information on this registration. The idea is that many more local actors could then take the role of a local authority, thus allowing for an easier spread of public-key certificates in the population. We also prove our scheme's security with Tamarin an automatic verification tool of cryptographic protocols.
Fichier principal
Vignette du fichier
localpki.pdf (205.43 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01564696 , version 1 (19-07-2017)

Identifiants

Citer

Jean-Guillaume Dumas, Pascal Lafourcade, Francis Melemedjian, Jean-Baptiste Orfila, Pascal Thoniel. LOCALPKI: A User-Centric Formally Proven Alternative to PKIX. 14th International Conference on Security and Cryptography SECRYPT, Jul 2017, Madrid, Spain. ⟨10.5220/0006461101870199⟩. ⟨hal-01564696⟩
530 Consultations
396 Téléchargements

Altmetric

Partager

More