Re: [dnsext] historal root keys for upgrade path?

[Brian Dickson <[e-mail]>]

On Mon, Jan 31, 2011 at 3:23 PM, Phillip Hallam-Baker <[e-mail]> wrote:
>
>
> On Mon, Jan 31, 2011 at 1:22 PM, Brian Dickson
> <[e-mail]> wrote:

>> The simplest bootstrap method would be to have a series of BSK
>> (bootstrap keys), created on a periodic basis (every N years), and
>> used as follows:
>
> If a compromise has occurred then the first thing to ask would be why.
> There are only three places where a compromise can logically occur - in the
> cryptographic algorithm, in the cryptographic hardware manufacturer or in
> ICANN,

No, there is a fourth place: brute force attack on the key/signature,
to find the key.

The brute force success on one key, compromises that key only, plus
any data signed by it or derived therefrom.

If another key of the same algorithm, held in the same hardware and
operated by the same party exists, but is not dependent upon the first
key, it remains secure.

Brian