Home > Public key certificate
As used in cryptography and computer security, a public key certificate (also called identity certificate) is a block of bits containing, in a specified format, the public half of an asymmetric key algorithm key pair (the "public key"), together with identity information, such as a person's name / email address / title / phone number / etc, all digitally signed by some person or entity, thereby binding the public key to the entity described by the attributes.In a typical PKI scheme, the signature will be of a certificate authority (CA). In a web of trust scheme, the signature is of either the user (a self-signed certificate) or other users ('endorsements'). In either case, the signature(s) on a certificate are attestations by the certificate signer that the identity information and the public key belong together.
1 Use
Certificates (or some equivalent scheme) are required for the large-scale use of public-key cryptography. Securely exchanging secret keys amongst users becomes impractical to the point of effective impossibility for anything other than quite small networks. Public key cryptography provides a way to evade this problem. In principle, if Alice wants others (any number of others) to be able to send her secret messages, she need only publish her public key. Anyone possessing it can then send her secure information. Unfortunately, Mallory can also publish a public key (for which he knows the related private key) claiming it is Alice's and so receive at least some of the secret messages meant for her. But if Alice builds her public key into a certificate and has it digitally signed by trusted Trent, anyone who trusts Trent can merely check the certificate to see whether Trent thinks the embedded public key is Alice's. In typical PKIs, Trent will be a CA, who is trusted perforce by all participants. In a Web of Trust, Trent can be any user, and whether to trust that user's attestation that a particular public key belongs to Alice will be up to the person wishing to send a message to Alice.
In large-scale deployments, Alice may not be familiar with Bob's certificate authority (perhaps they each have a different CA -- if both use employer CAs, different employers would produce this result), so Bob's certificate may also include his CA's public key signed by a "higher level" CA2, which might be recognized by Alice. This process leads in general to a hierarchy of certificates, and to even more complex trust relationships. Public key infrastructure refers, mostly, to the software that manages certificates in a large-scale setting. In X.509 PKI systems, the hierarchy of certificates is always a top-down tree, with a root certificateIn cryptography and computer security, a root certificate is an unsigned public key certificate, or a self-signed certificate, and is part of a PKI scheme. The most common commercial variety is based on the ISO X. 509 standard. Normally an X. 509 certific at the top, representing a CA that is 'so central' to the scheme that it does not need to be authenticated by some trusted third partyIn cryptography, a trusted third party (TTP is an entity (eg, a person, a company, a government agency,. who carries out a necessary part of some cryptographic protocols. The term is one which is often used in academic papers analyzing such protocols, and.
A certificate may be revoked if it is discovered that its related private key has been compromised, or if the relationship (between an entity and a public key) embedded in the certificate is discovered to be incorrect or has changed; this might occur, for example, if a person changes jobs or names. A revocation will likely be a rare occurrence, but the possibility means that when a certificate is trusted, the user should always check its validity. This can be done by comparing it against a certificate revocation listIn the operation of some cryptosystems, usually PKIs, a certificate revocation list (CRL is a list of certificates which have been revoked, are no longer valid, and should not be relied upon by any system user. A certificate is revoked (and be entered on (CRL) — a list of revoked or cancelled certificates. Ensuring that such a list is up-to-date and accurate is a core function in a centralized PKI, one which requires both staff and budget and one which is therefore sometimes not properly done. It must be readily, if not actually instantly, available to any who need it whenever it is needed and must be updated very frequently. The other way to check a certificate validity is to query the certificate authority using the Online Certificate Status ProtocolOnline Certificate Status Protocol OCSP is a method of determining revocation status of a X. 509 digital certificate using means other than CRLs. It is described in RFC 2560 on its way to become an official IETF standard. Tumbleweed Communications' Valice (OCSP) to know the status of a specific certificate.
A certificate typically includes:
- The public key being signed.
- A name, which can refer to a person, a computer or an organization.
- A validity period.
- The location ( URL) of a revocation center.
The most common certificate standard is the ITU-TITU-T is the telecom standardization organization of the International Telecommunication Union (ITU). It was previously known as CCITT or Comite Consultatif International Telephonique et Telegraphique (Consultative Committee for International Telegraphy a X.509. X.509 is being adapted to the Internet by the IETF PKIX work-group.
