Fast Digital Certificate Revocation

摘要: Digital Certificates are central to the concept of Public Key Infrastructures (PKI) and serve as a cryptographic proof one’s public key. Occasionally, certificates must be declared invalid prior their due expiration date in case key compromise or change identity. Thus all PKIs should provide mechanism through which an issued certificate may revoked. The revocation mechanisms commonly classified into Certificate Revocation Lists (CRLs), trusted dictionaries online mechanisms. We briefly discuss existing techniques then present new technique. More precisely, we alternative short lived proposed by Rivest.