distributed secret key

Kyle Hamilton aerowolf at gmail.com
Sun May 24 20:05:14 UTC 2020


Actually, I was wrong about the prior one.
https://patents.google.com/patent/US6411716 looks like it has a distributed
CA function with multi-step, multi-fragment signatures.  (This looks
fascinating, and I'm going to study it over the weekend -- still in a
lockdown, so no real Memorial Day party for me.)

-Kyle H

On Sun, May 24, 2020, 14:59 Kyle Hamilton <aerowolf at gmail.com> wrote:

> From glancing at the abstract, https://patents.google.com/patent/US5799086
> looks like it might be the one?  It also says that it is expired,
> expiration having been anticipated on 2014-01-13.
>
> -Kyle H
>
> On Sun, May 24, 2020, 11:54 Salz, Rich <rsalz at akamai.com> wrote:
>
>>
>>    - In any case, I am unaware of any existing system which meets your
>>    requirement 3.  Admittedly, I haven't specifically searched for such.
>>
>>
>>
>> CertCo (now defunct, don’t know who has the intellectual property) had a
>> patent that did ALL of the things.  RSA keygen, split the key, each key
>> signs the data, looks like an RSA signature, then when enough have been
>> done, combine them and it matches the original pre-split public key.  That,
>> and the followon patents, are cool.  Don’t know if they’re expired or not.
>>
>>
>>
>> To answer the main question: OpenSSL doesn’t do anything remotely in this
>> area.  The closest is multi-prime RSA.
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20200524/3cb397a2/attachment.html>


More information about the openssl-users mailing list