Performance Evaluation of Certificate Revocation Using k-Valued Hash Tree

  • Authors:
  • Hiroaki Kikuchi;Kensuke Abe;Shohachiro Nakanishi

  • Affiliations:
  • -;-;-

  • Venue:
  • ISW '99 Proceedings of the Second International Workshop on Information Security
  • Year:
  • 1999

Quantified Score

Hi-index 0.00

Visualization

Abstract

A CRL (Certificate Revocation List) defined in X.509 is currently used for certificate revocation. There are some issues of CRL including a high communication cost and a low latency for update. To solve the issues, there are many proposals including CRT (Certificate Revocation Tree), Authenticated Dictionary, and Delta List. In this paper, we study CRT using k-valued hash tree. To estimate the optimal value of k, we examine the overhead of computation and the communication cost. We also discuss when a CRT should be reduced by eliminating unnecessary entries that are already expired.