Public Key Infrastructure for U.S. Government Unclassified but Sensitive Applications

摘要

This report discusses a range of architectural issues relating to the design of a Public Key Infrastructure (PKI) for U.S. federal government use in unclassified but sensitive electronic applications. It is assumed that the PKI will be used for ensuring the authenticity and integrity of sensitive information in electronic transactions and for protecting the confidentiality of sensitive information. Consequently, both digital signature and encryption functions will be supported. Protection of classified information is excluded from consideration.