Attacks on Authentication Protocols with Compromised Certificates and How to Fix them

摘要

The security of authentication protocols based on public key cryptography depends on the validity and freshness of the certificate. It is usually assumed that a well deployed Public Key Infrastructure (PKI) can guarantee the Validity and freshness of certificates through Mechanisms such as Certificate Revocation List (CRL) or Online Certificate Status Protocol. In reality, such a guarantee is not always assured. This paper analyzes the security of public Key authentication protocols in various situations with compromised certificates.