Introduction to Public Key Infrastructures

The introduction of public key cryptography (PKC) was a critical advance in IT security. In contrast to symmetric key cryptography, it enables confidential communication between entities in open networks, in particular the Internet, without prior contact. Beyond this PKC also enables protection techniques that have no analogue in traditional cryptography, most importantly digital signatures which for example support Internet security by authenticating software downloads and updates. Although PKC does not require the confidential exchange of secret keys, proper management of the private and public keys used in PKC is still of vital importance: the private keys must remain private, and the public keys must be verifiably authentic. So understanding so-called public key infrastructures (PKIs) that manage key pairs is at least as important as studying the ingenious mathematical ideas underlying PKC.

In this book the authors explain the most important concepts underlying PKIs and discuss relevant standards, implementations, and applications. The book is structured into chapters on the motivation for PKI, certificates, trust models, private keys, revocation, validity models, certification service providers, certificate policies, certification paths, and practical aspects of PKI.

This is a suitable textbook for advanced undergraduate and graduate courses in computer science, mathematics, engineering, and related disciplines, complementing introductory courses on cryptography. The authors assume only basic computer science prerequisites, and they include exercises in all chapters and solutions in an appendix. They also include detailed pointers to relevant standards and implementation guidelines, so the book is also appropriate for self-study and reference by industrial and academic researchers and practitioners.

• Certificates, certification (security)
• Cryptography
• Cryptology
• Digital signatures
• Direct trust
• Electronic signatures
• Hash functions
• Hybrid encryption
• Identity-based cryptography
• Key ring
• Message authentication codes (MACs)
• Non-repudiation
• Object identifiers
• Personal security environment (PSE)
• Private-key encryption
• Public-key cryptography (PKC)
• Public-key encryption
• Public-key infrastructure (PKI)
• Secret-key encryption;
• Smart cards
• Trust signatures
• Validity models
• Virtual private network (VPN)
• Web of trust model
• X.509 certificates

From the reviews:

“The layout and chapter exercises make the book suitable for use as a course textbook. … The authors explain the complex workings of public-key cryptography and the infrastructure necessary to support it. The chapters are well illustrated with diagrams and figures. It is not necessary to understand how PKI works to securely use the Internet, but if you do want to understand the minutia of PKI then this book will help.” (David B. Henderson, Computing Reviews, March, 2014)

• FB Informatik, TU Darmstadt, Darmstadt, Germany

  Johannes A. Buchmann

• FlexSecure GmbH, Darmstadt, Germany

  Evangelos Karatsiolis

• AGT International, Darmstadt, Germany

  Alexander Wiesmaier

Johannes A. Buchmann received a PhD in Mathematics in 1982. He is a Professor of Computer Science and Mathematics at TU Darmstadt specializing in cryptography and IT security. In 1993 he received the Leibniz Award of the German Science Foundation, the most prestigious science award in Germany. He is a member of the German National Academy of Sciences Leopoldina and the German Academy of Science and Engineering. He is also the author of the Springer Undergraduate Text in Mathematics "Introduction to Cryptography".

Evangelos Karatsiolis received a PhD in computer science in 2007. He works as a software engineer at FlexSecure GmbH in Darmstadt, designing and implementing PKI projects. He has lectured on PKI and has served on several program committees in the field of IT security.

Alexander Wiesmaier obtained a PhD in computer science in 2008. He works as a Lead Architect and a Senior Researcher at AGT International in Darmstadt. He specializes in critical infrastructure protection and national cyberspace defense. He is a consulting expert for the European Network and Information Security Agency, advising the agency on electronic identities and applied cryptography. He has lectured on IT security and has served on various program committees in the field of IT security.

Policies and ethics