Analytical performance evaluation of nested certificates

• Published in: Performance evaluation Vol. 36; pp. 213 - 232
• Main Authors: Levi, Albert, Çağlayan, M.Ufuk
• Format: Journal Article Conference Proceeding
• Language: English
• Published: Amsterdam Elsevier B.V 01.08.1999; Elsevier
• Subjects: Applied sciences; Computer network security; Computer science; control theory; systems; Computer systems performance. Reliability; Digital certificate; Digital signature; Exact sciences and technology; Performance evaluation; Public key infrastructure; Software; Performance evaluation; Computer network security; Digital signature; Digital certificate; Public key infrastructure; Computer network; Public key; Verification; Encryption; Computer security; Certification
• ISSN: 0166-5316; 1872-745X
• DOI: 10.1016/S0166-5316(99)00022-X

The classical certificate systems are computationally inefficient, since they use signature operations based on public key cryptosystems. The nested certificates (A. Levi, Design and performance evaluation of the nested certification scheme and its applications in public key infrastructures, Ph.D. Thesis, Department of Computer Engineering, Boğaziçi University, Istanbul, Turkey) are proposed to improve the performance of the certificate verification. A nested certificate is a certificate for another, say subject, certificate. The subject certificates can be classical or other nested certificates. A subject certificate can be verified without using the public key cryptosystem operations. In this way, the nested certificates improve the performances of the certificate and certificate path verification. In this paper, analytical formulations and graphical analyses of the computational performance improvement of the nested certificate usage are given for both single subject certificate verification and certificate path verification cases. Moreover, it is also shown that the usage of nested certificates always improves the computational performances of the verification of a single certificate and the verification of a certificate path.