Re: Online Certificate Revocation Protocol

[Tony Bartoletti <[e-mail]>]

Oops.  Correction below.

At 04:47 PM 6/8/01 -0400, Housley, Russ wrote:
>Peter:
>
>You make an interesting point.  I figure that a message signed with the 
>private key that is claiming to be compromised is a good thing to pay 
>attention to.
>
>If the message is from the subscriber, then that subscriber probably knows 
>that some bad thing just happened and the subscriber is trying to let 
>everyone know.  He does not want any one to rely on the key any more.
>
>If the message is not from the subscriber, then the key has absolutely 
>been compromised.  What a nice attacker to tell everyone.
>
>Russ

Indeed.  I have often considered that a revocation request signed with the 
corresponding private key is one of the few things in this world one can 
act upon reliably.  If we could build whole systems on such principles, 
we'd be home free.

A question:  If one discovers that they have accidently destroyed their 
private key (and there is no evidence of compromise), are they under any 
particular obligation to request revocation?  Is there any liability, or 
other real "downside" to simply getting a new key and keeping mum about the 
fate of the former key?

(I ask, because this seems the only [USER GENERATED] case where revocation 
request could NOT be signed by the key in question.)

___tony___


>At 04:34 AM 6/9/2001 +0000, Peter Gutmann wrote:
>>Nada Kapidzic Cicovic <[e-mail]> writes:
>>
>> >This is exactly what CMP specifies. Many vendors already have support 
>> for CMP
>> >EE initiated certificate revocation. The interoperability of different
>> >implementations of CMP certificate revocation (among other things) has been
>> >conducted during PKI Forum and ICSA CMP interop testing quite successfully.
>>
>>However there are two ways to look at revocation, the DOS model and the scram
>>switch model.  The DOS model says that anyone who can revoke your cert can
>>cause a DOS, so it should be made as difficult as humanly possible to 
>>revoke a
>>cert.  The scram switch model says that when your private key is compromised
>>you want the cert revoked right now with no excuses, so it should be made as
>>easy as possible to revoke a cert.  CMP follows the DOS model and makes 
>>it very
>>difficult (in some cases impossible) to revoke your cert.  Programs like PGP
>>follow the scram switch model (via suicide-note revocations) and make it very
>>easy to revoke your cert.  Depending on your point of view, CMP may not 
>>be the
>>right thing for handling revocations.
>>
>>Peter.

Tony Bartoletti 925-422-3881 <[e-mail]>
Information Operations, Warfare and Assurance Center
Lawrence Livermore National Laboratory
Livermore, CA 94551-9900