1 / 11

Is Hierarchical Public-key Certification The Next Target For Hackers?

Is Hierarchical Public-key Certification The Next Target For Hackers?. 報告人：范亞亭 2005/10/06. 出處. Communications of The ACM August 2004/Vol.47,No.8 By Mike Burmester and Yvo G. Desmedt. 大綱. Public-key Cryptosystems and Certificates How Secure is a Certifying Authority A Horizontal Approach

colorado-massey
Download Presentation

Is Hierarchical Public-key Certification The Next Target For Hackers?

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Is Hierarchical Public-key Certification The Next Target For Hackers? 報告人：范亞亭 2005/10/06

  2. 出處 • Communications of The ACM August 2004/Vol.47,No.8 • By Mike Burmester and Yvo G. Desmedt

  3. 大綱 • Public-key Cryptosystems and Certificates • How Secure is a Certifying Authority • A Horizontal Approach • Conclusion

  4. Public-key Cryptosystems and Certificates • X509 • Public-key certificates:data + signature • Hierarchical infrastructure (RCA & CAs)

  5. Digital signatures

  6. How Secure is a Certifying Authority • Attacks:insider & outsider • Security:security tools & policies • X509:each node is a single point of failure • If a hacker succeeds in penetratingthe RCAthen the security of the system is completely broken.

  7. A Horizontal Approach • the same public keydeterminedby taking a majority vote over the trust-paths • There are 2k+1 node-disjoint trust-paths that connect any two nodes. • Attacking such structures requires the penetration of more than k nodes.

  8. Combining hierarchical and horizontal infrastructures RCA1 RCA2 RCA3

  9. Conclusion • Hierarchical structures:efficiency,less expensive,vulnerable • 2k + 1 certificates are needed for a robust approach • Combining hierarchical and horizontal infrastructures may not be too excessive and the degree of security obtained is higher.

More Related