Capture-Resilient Private Key Storage and Employment Scheme
YU Shu-yao · Journal of Chinese Computer Systems · 2006
Common practice of protecting private key from compromise was to encrypt it with a password and store it in the user′s storage device. However, the private key was vulnerabled to offline dictionary attack when the device is captured by an adversary. This paper presents a private key storage and employment scheme which requires the client to authenticate to an online server in order to collaboratively compute the private key cryptographic operations. The proposed scheme has the advantages of secure private key storage, immediate certificate revocation and distributed trust management.