Public-key Infrastructure - Overview

Overview

Public-key cryptography is a cryptographic technique that enables users to securely communicate on an insecure public network, and reliably verify the identity of a user via digital signatures.

A public-key infrastructure (PKI) is a system for the creation, storage, and distribution of digital certificates which are used to verify that a particular public key belongs to a certain entity. The PKI creates digital certificates which map public keys to entities, securely stores these certificates in a central repository, and revokes them if needed.

A PKI consists of:

• A certificate authority (CA) that both issues and verifies the digital certificates.
• A registration authority which verifies the identity of users requesting information from the CA
• A central directory—i.e. a secure location in which to store and index keys.
• A certificate management system