Dynamic Public Key Certificates with Forward Secrecy

Conventionally, public key certificates bind one subject with static so that the can facilitate services of infrastructure (PKI). In PKI, need to be renewed (or revoked) for several practical reasons, including certificate expiration, private breaches, condition changes, and possible risk reduction. The renewal process is very costly, especially those environments where online authorities are not available or connection reliable. A dynamic (DPKC) facilitates changeover current public–private pairs without renewing authority (CA). This paper extends previous study in aspects: (1) we formally define DPKC; (2) security properties; (3) propose another implementation Krawczyk–Rabin chameleon-hash-based (4) two variants DPKC, using Ateniese–Medeiros key-exposure-free chameleon hash; (5) detail application scenarios.