【摘要】 交叉认证的安全性由不同PKI信任域的根CA的数字签名来保证。如果根CA密钥泄露,整个PKI体系的信任关系就全部失效。文章分析了交叉认证技术实现的策略,提出了前向安全数字签名的交叉认证思想。更多还原

【Abstract】 The secure of cross authentication is based on the digital signature of root CA in different trust domain. If a root CA’ s signing secret is compromised, the PKI system is invalid obviously. This paper analyzes the policy of the cross authentication, and puts a thought of forward- secure digital signature.更多还原