Public key distribution through "cryptoIDs"

Trevor Perrin
2003 Proceedings of the 2003 workshop on New security paradigms - NSPW '03  
In this paper, we argue that person-to-person key distribution is best accomplished with a key-centric approach, instead of PKI: users should distribute public key fingerprints in the same way they distribute phone numbers, postal addresses, and the like. To make this work, fingerprints need to be small, so users can handle them easily; multzpurpose, so only a single fingerprint is needed for each user; and long-lived, so fingerprints don't have to be frequently redistributed. We show how these
more » ... qualities can be achieved with simple and well-understood techniques. The chief technique is for each user to store a root key in a highly secure environment and use it to certify subkeys for use in more convenient environments. Certificate formats like X.509, PGP, and SPKI could be used for this, but we argue that a format designed expressly for this could do a better job; thus we design the cryptolD certificate format.
doi:10.1145/986655.986669 dblp:conf/nspw/Perrin03 fatcat:ahnuqzzpdnh47lx6eubg3ajj4q