CRchain: An Efficient Certificate Revocation Scheme Based on Blockchain

Ge, Xiaoxue; Wang, Liming; An, Wei; Zhou, Xiaojun; Li, Benyu

doi:10.1007/978-3-030-95388-1_30

Cited by 4 publications

(1 citation statement)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…A blockchain-based accountable structured certificate log method has been proposed [38,39]. CertChain [40] utilizes a dual counting bloom filter (DCBF) with the elimination of false positives.…”

Section: Blockchain-based Pkimentioning

confidence: 99%

BRT: An Efficient and Scalable Blockchain-Based Revocation Transparency System for TLS Connections

Xing,

Wang,

et al. 2023

Sensors

View full text Add to dashboard Cite

Log-based public key infrastructure(PKI) refers to a robust class of CA-attack-resilient PKI that enhance transparency and accountability in the certificate revocation and issuance process by compelling certificate authorities (CAs) to submit revocations to publicly and verifiably accessible logs. However, log-based PKIs suffer from a reliance on centralized and consistent sources of information, rendering them susceptible to split-world attacks, and they regrettably fail to provide adequate incentives for recording or monitoring CA behavior. Blockchain-based PKIs address these limitations by enabling decentralized log audits through automated financial incentives. However, they continue to face challenges in developing a scalable revocation mechanism suited for lightweight clients. In this paper, we introduce BRT, a scalable blockchain-based system for certificate and revocation transparency. It serves to log, audit, and validate the status of certificates within the transport layer security (TLS)/secure sockets layer(SSL) PKI domain. We designed an audit-on-chain framework, coupled with an off-chain storage/computation system, to enhance the efficiency of BRT when operating in a blockchain environment. By implementing a blockchain-based prototype, we demonstrate that BRT achieves storage-efficient log recording with a peak compression rate reaching 8%, cost-effective log updates for large-scale certificates, and near-instantaneous revocation checks for users.

show abstract

Section: Blockchain-based Pkimentioning

confidence: 99%