Dynamic Public Key Certificates with Forward Secrecy

Abstract

Conventionally, public key certificates bind one subject with one static public key so that the subject can facilitate the services of the public key infrastructure (PKI). In PKI, certificates need to be renewed (or revoked) for several practical reasons, including certificate expiration, private key breaches, condition changes, and possible risk reduction. The certificate renewal process is very costly, especially for those environments where online authorities are not available or the connection is not reliable. A dynamic public key certificate (DPKC) facilitates the dynamic changeover of the current public–private key pairs without renewing the certificate authority (CA). This paper extends the previous study in several aspects: (1) we formally define the DPKC; (2) we formally define the security properties; (3) we propose another implementation of the Krawczyk–Rabin chameleon-hash-based DPKC; (4) we propose two variants of DPKC, using the Ateniese–Medeiros key-exposure-free chameleon hash; (5) we detail two application scenarios.

Decentralized Zone-Based PKI: A Lightweight Security Framework for IoT Ecosystems

“…PKI facilitates the generation, dissemination, modification, and revocation of digital certificates. A digital certificate serves as a connection between public keys and the identities of numerous entities [50]. As part of the procedure to create the connection, a Certificate Authority (CA) produces and registers these digital certificates.…”

Optimizing Blockchain Network Creation: Automation with Ansible on Private Blockchain Hyperledger Fabric Using Simplified RAFT Consensus Method

“…With the trust from the CA, validated certificates enable communicating partners to authenticate entities, verify document signatures, distribute and agree on session keys, and perform other functions. (Chien, 2021).…”