Abstract:Public key infrastructures (PKIs) are one of the main building blocks for securing communications over the Internet. Currently, PKIs are under the control of centralized authorities, which is problematic as evidenced by numerous incidents where they have been compromised. The distributed, fault tolerant log of transactions provided by blockchains and more recently, smart contract platforms, constitutes a powerful tool for the decentralization of PKIs. To verify the validity of identity records, blockchain-based identity systems store on chain either all identity records, or, a small (or even constant) sized amount of data to verify identity records stored off chain. However, as most of these systems have never been implemented, there is little information regarding the practical implications of each design's tradeoffs. In this work, we first implement and evaluate the only provably secure, smart contract based PKI of [1] on top of Ethereum. This construction incurs constant-sized storage at the expense of computational complexity. To explore this tradeoff, we propose and implement a second construction which, eliminates the need for trusted setup, preserves the security properties of [1] and, as illustrated through our evaluation, is the only version with constant-sized state that can be deployed on the live chain of Ethereum. Furthermore, we compare these two systems with the simple approach of most prior works, e.g., the Ethereum Name Service, where all identity records are stored on the smart contract's state, to illustrate several shortcomings of Ethereum and its cost model. We propose several modifications for fine tuning the model, which would be useful to be considered for any smart contract platform like Ethereum so that it reaches its full potential to support arbitrary distributed applications.

A novel method for generating public keys involving matrix operations

Lattice-based PKEs/KEMs

Biometrics-based identifiers for digital identity management

An Implementation Suite for a Hybrid Public Key Infrastructure

General And Efficient Certificateless Public Key Encryption Constructions

Identity-Based Signature Schemes for Multivariate Public Key Cryptosystems.

Constructing linear transformations of MPKC by generalized central symmetric matrices

On Key Issuing Privacy in Distributed Online Social Networks

Improved Hierarchical Identity-Based Parallel Key-Insulated Encryption

Securing Key Issuing in Peer-to-peer Networks.

Simple Matrix - A Multivariate Public Key Cryptosystem (mpkc) for Encryption

On the Practicality of Smart Contract PKI

Efficient Identity-Based Key Issue with TPM

Public Key Encryption Without Random Oracle Made Truly Practical

A novel identity-based key issuing scheme based on interacting neural network

Identity-Based Parallel Key-Insulated Encryption with Multiple Long-Term Keys

Matrix powers algorithms for trust evaluation in PKI architectures

Skip: A Secure Key Issuing Scheme for Peer-To- Peer Networks

Asymmetric Cryptography Based on the Tropical Jones Matrix

A Systematic Approach Towards Efficient Private Matrix Multiplication

Full-Resilient Memory-Optimum Multi-Party Non-Interactive Key Exchange