69 citations · 197 across the 9 of their papers we have counts for
7 papers · 1 filter
F-PKI: Enabling Innovation and Trust Flexibility in the HTTPS Public-Key Infrastructure
Laurent Chuat, Cyrill Krähenbühl, Prateek Mittal +1
We present F-PKI, an enhancement to the HTTPS public-key infrastructure (or web PKI) that gives trust flexibility to both clients and domain owners, and enables certification autho…
Zero-Knowledge User Authentication: An Old Idea Whose Time Has Come
Laurent Chuat, Sarah Plocher, Adrian Perrig
User authentication can rely on various factors (e.g., a password, a cryptographic key, biometric data) but should not reveal any secret or private information. This seemingly para…
SoK: Delegation and Revocation, the Missing Links in the Web's Chain of Trust
Laurent Chuat, AbdelRahman Abdou, Ralf Sasse +3
The ability to quickly revoke a compromised key is critical to the security of any public-key infrastructure. Regrettably, most traditional certificate revocation schemes suffer fr…
BlockPKI: An Automated, Resilient, and Transparent Public-Key Infrastructure
Lukasz Dykcik, Laurent Chuat, Pawel Szalachowski +1
This paper describes BlockPKI, a blockchain-based public-key infrastructure that enables an automated, resilient, and transparent issuance of digital certificates. Our goal is to a…
RITM: Revocation in the Middle
Pawel Szalachowski, Laurent Chuat, Taeho Lee +1
Although TLS is used on a daily basis by many critical applications, the public-key infrastructure that it relies on still lacks an adequate revocation mechanism. An ideal revocati…
PKI Safety Net (PKISN): Addressing the Too-Big-to-Be-Revoked Problem of the TLS Ecosystem
Pawel Szalachowski, Laurent Chuat, Adrian Perrig
In a public-key infrastructure (PKI), clients must have an efficient and secure way to determine whether a certificate was revoked (by an entity considered as legitimate to do so),…
Efficient Gossip Protocols for Verifying the Consistency of Certificate Logs
Laurent Chuat, Pawel Szalachowski, Adrian Perrig +2
The level of trust accorded to certification authorities has been decreasing over the last few years as several cases of misbehavior and compromise have been observed. Log-based ap…