Self-signed implicit certificates

摘要

There are disclosed systems and methods for creating a self-signed implicit certificate. In one embodiment, the self-signed implicit certificate is generated and operated upon using transformations of a nature similar to the transformations used in the ECQV protocol. In such a system, a root CA or other computing device avoids having to generate an explicit self-signed certificate by instead generating a self-signed implicit certificate.

主权项

1. A method of generating a first and a second private key and establishing a first and a second self-signed implicit certificate that can be operated on to obtain a first and a second corresponding public key, said method being performed by a computing device in a cryptographic system based on an underlying group of order n, said computing device having a cryptographic unit, said method comprising:
said computing device obtaining a long-term private key and a corresponding public-key reconstruction value; said computing device obtaining a first and a second data; said computing device operating on said public-key reconstruction value and said first data to obtain said first self-signed implicit certificate; said computing device operating on said public-key reconstruction value and said second data to obtain said second self-signed implicit certificate; said computing device operating on said long-term private key and said first self-signed implicit certificate to obtain said first private key; and said computing device operating on said long-term private key and said second self-signed implicit certificate to obtain said second private key.