This web page contains the PKI knowledgebase compiled by ODU PKI research group so far. The current page has information gathered by Satyam K Das of the Vendor Group and provides links to various resources available over the internet, Good Books on PKI and finally few of the many companies ruling the world of PKI today.

Also Pavan Sura of Implementation group is working on his Masters Project using PKI and related technologies. To know more about the progress of Masters Project and PKI resources compiled by Pavan Sura go to http://www.cs.odu.edu/~pki/pavansura/index.html

Web Resourses on PKI

• PKI Forum
• NIST PKI Program
• Webopedia
• The PKI Page
• Ten Risks About PKI
• MIT Theory Lab: Security and Cryptography
• PKI Policies
• PKI Challenges
• Understanding PKI
• Open Source PKI Projects
• Certificates and PKI
• Public Key Encryption

Journals on PKI (Some of these are Available in the ODU Library)

1. Using public-key infrastructures for security and risk management
Author: Wing, Paul.; O'Higgins, Brian.
Source: IEEE Communications Magazine v. 37 no9 (Sept. 1999) p. 71-3

2. Will PKI become a key to online security?
Author: Ortiz, Sixto, Jr.
Source: IEEE Computer v. 33 no12 (Dec. 2000) p.13-15

3. Securing the wireless World Wide Web
Author: Cravotta, Nicholas.
Source: EDN v. 45 no17 (Aug. 17 2000) p.89-100

4. Risks of PKI: e-commerce
Author: Ellison,Carl and Schneier,Bruce.
Source: Communications of the ACM v. 43 no2 (Feb.2000) p. 152

5. Common key recovery block format: Promoting interoperability between dissimilar key recovery mechanisms
Author: Gupta,Sarbari.
Source: Computers & Security, vol. 19, no. 1, pp. 41-47, 2000

6. Technological infrastructure for PKI and digital certification
Author: Hunt, Ray
Source: Computer communications. 24, no. 14, (2001): 1460 (12 pages)

7. Columns - Inside Risks - PKI: A Question of Trust and Value
Author: Forno,Richard and Feinbloom,William
Source: Communications of the ACM. 44, no. 6,(2001): 120 (191 pages)

8. The nature of a useable PKI
Author: Ellison,Carl M
Source: Computer networks. 31, no. 8, (1999): 823 (8 pages)

9. Scaling issues in large PKI communities
Author: Varvitsiosis
Source: Future Generation Computer Systems [Future Gener Comput Syst], vol. 16, no. 4, pp. 361-372, Feb 2000

10. Which PKI (Public Key Infrastructure) is the right one?
Author: Carlisle Adams, Mike Burmester, Yvo Desmedt, Mike Reiter and Phil Zimmerman
Source: Proceedings of the 7th ACM conference on Computer and communications security, 2000, Pages 98-101

11. Application of security policy to role-based access control and the common data security architecture
Author: Lin,A and Brown,R
Source: Computer Communications, vol. 23, no. 17, pp.1584-1593, Nov 2000

12. Managing certificates in a corporate environment
Author: Oppliger,Rolf.
Source: Ann Telecommun, vol. 55, no. 7, pp. 341-351, Jul 2000

13. Implementing public key infrastructures in a dynamic business environment
Author: Barber,Richard.
Source: Computers & Security, vol. 19, no. 3, pp.230-233, 2000

14. Certificate revocation and certificate update
Author: Naor,Moni and Nissim,Kobbi
Source: IEEE J Sel Areas Commun, vol. 18, no. 4, pp. 561-570, 2000

15. Reasoning about public-key certification: On bindings between entities and public keys
Author: Kohlas,Reto and Maurer,Ueli
Source: IEEE J Sel Areas Commun, vol. 18, no. 4, pp. 551-559, 2000

16. Efficient, dynamic and trust preserving public key infrastructure
Author: Levi,Albert and Caglayan,MUfuk
Source: PROC IEEE COMPUT SOC SYMP RES SECUR PRIVACY, IEEE, PISCATAWAY, NJ, (USA), 2000, pp. 203-214

17. Intersection of public key infrastructures and the law
Author: Carolina,Robert and Lyford,Jamie
Source: Inf Secur Tech Rep, vol. 5, no. 4, pp. 39-52, 2000

18. PKI - Panacea or silver bullet?
Author: Sundt,Chris.
Source: Inf Secur Tech Rep, vol. 5, no. 4, pp. 53-65, 2000

19. Authorization models - PKI versus the real world
Author: Matthews,Steve.
Source: Inf Secur Tech Rep, vol. 5, no. 4, pp. 66-71, 2000

20. Public key infrastructure: Analysis of existing and needed protocols and object formats for key recovery
Author: Gupta,Sarbari and Matyas,Stephen MJr
Source: Computers & Security, vol. 19, no. 1, pp.56-68, 2000

21. Efficient fault-tolerant certificate revocation
Author: Wright,RN ; Lincoln,PD and Millen,JK.
Source: PROC ACM CONF COMPUTER COMMUN SECUR, 2000, pp. 19-24

22. PKI, elliptic curve cryptography, and digital signatures
Author: Caelli,William J ; Dawson,Edward P and Rea,Scott A
Source: Computers & Security, vol. 18, no. 1, pp.47-66, 1999

23. Overview of PKI trust models
Author: Perlman,Radia
Source: IEEE Network, vol. 13, no. 6, pp. 38-43, 1999

24. Certificate authorities: Who do you trust?
Author: Bruno,Lee.
Source: Data Communications, vol. 27, no. 4, pp. 54-63, 21 Mar 1998

25. Profiles and protocols for the Internet public-key infrastructure
Author: Adams,Carlisle and Lloyd,Steve
Source: PROC IEEE COMPUTER SOC WORKSHOP FUTURE TRENDS DISTRIB COMPUT, IEEE COMP SOC, LOS ALAMITOS, CA, (USA), 1997, pp. 220-224

Some of the Good Books on PKI

1. Planning for PKI
2. PKI : Implementing and Managing E-security
3. Understanding Public Key Infrastructure
4. Secrets & Lies : Digital Security in a Networked World
5. PKI : A Wiley Tech Brief

Some of the Major PKI Vendors today

1. Entrust
2. Baltimore Technologies
3. Verisign
4. Microsoft
5. RSA Security
6. Certicom