Identity-based cryptography: Difference between revisions

Revision as of 05:59, 30 August 2010

Revision as of 06:14, 30 August 2010

Line 1:

'''Identity-based cryptography''' is a type of [[public-key cryptography]] in which a publicly known string representing an individual or organization could be used as a [[public key]]. The public string could include an email address, ___domain name, or a physical IP address.

The first implementation of identity-based signatures and an email-address based PKI was developed by [[Adi Shamir]] in 1984<ref>Adi Shamir, [http://www.iseca.org/modules/mydownloads/visit.php?cid=56&lid=33 Identity-Based Cryptosystems and Signature Schemes]. ''Advances in Cryptology: Proceedings of CRYPTO 84, Lecture Notes in Computer Science'', 7:47--53, 1984</ref>, which allowed users to verify [[digital signatures]] using only public information such as the user's identifier. Under Shamir's scheme, a trusted third party would deliver the private key to the user after verification of the user's identity, with verification essentially the same as that required for issuing a certificate in a typical [[Public Key Infrastructure | Public Key Infrastructure (PKI)]].

In 2001, Boneh and Franklin devised the first practical implementation of such an Identity-Based Encryption scheme/.<ref>{{cite publisherjournal |

author = Dan Boneh and Matt Franklin | title = Identity-based encryption from the Weil pairing |publisher = Springer | work = Advances in Cryptology — CRYPTO 2001 | booktitle = Lecture Notes in Computer Science | year=2001 | accessdate = 2010-08-26 | volume = 2139/2001 | pages = 213-229 | url = http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.66.1131&rep=rep1&type=pdf}}</ref>

==Usage==