A blue print practical implementation of PKI using open PGP at University of Tabuk

Public Key Infrastructure (PKI) implementations and deployments have been encountering many problems. Most of the information security officers are torn between adhering to the standards or following up a particular mathematical and theoretical model. In this paper we are implementing and deploying PKI at University of Tabuk. In this real world experience we do believe that we can avoid many difficulties, impracticalities and the negative experiences of the past. Another objective is to eliminate paper based circulations by employing digital signature. We elected to deploy OpenPGP and make a test bed for University of Tabuk and future city wide deployments.

[1]  Hiroyuki Sato,et al.  Quantifying Cost Structure of Campus PKI , 2011, 2011 IEEE/IPSJ International Symposium on Applications and the Internet.

[2]  Tatu Ylönen,et al.  The Secure Shell (ssh) Transport Layer Protocol , 2006 .

[3]  Ludek Matyska,et al.  Improving Security in Grids Using the Smart Card Technology , 2006, 2006 7th IEEE/ACM International Conference on Grid Computing.

[4]  Paul E. Hoffman,et al.  Cryptographic Suites for IPsec , 2005, RFC.

[5]  T. Dierks,et al.  The TLS protocol , 1999 .

[6]  Hiroyuki Sato,et al.  Analysis of Security of PKI Operation with Multiple CP/CPS Based on Level of Assurance , 2012, 2012 IEEE 36th Annual Computer Software and Applications Conference Workshops.

[7]  Whitfield Diffie,et al.  New Directions in Cryptography , 1976, IEEE Trans. Inf. Theory.

[8]  Carlisle M. Adams,et al.  Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) , 2001, RFC.

[9]  Peter Gutmann,et al.  Lessons Learned in Implementing and Deploying Crypto Software , 2002, USENIX Security Symposium.