Self-Delegation with Controlled Propagation - or - What If You Lose Your Laptop.

Oded Goldreich; Birgit Pfitzmann; Ronald L.  Rivest

Paper 1997/012

Self-Delegation with Controlled Propagation - or - What If You Lose Your Laptop.

Oded Goldreich, Birgit Pfitzmann, and Ronald L. Rivest

Abstract

We introduce delegation schemes wherein a user may delegate rights to himself, i.e., to other public keys he owns, but may not safely delegate those rights to others, i.e., to their public keys. In our motivating application, a user has a primary (long-term) key that receives rights, such as access privileges, that may not be delegated to others, yet the user may reasonably wish to delegate these rights to new secondary (short-term) keys he creates to use on his laptop when traveling, to avoid having to store his primary secret key on the vulnerable laptop. We propose several cryptographic schemes, both generic and practical, that allow such self-delegation while providing strong motivation for the user not to delegate rights that he only obtained for personal use to other parties.

Metadata

Available format(s): PS
Publication info: Published elsewhere. Appeared in the THEORY OF CRYPTOGRAPHY LIBRARY and has been included in the ePrint Archive.
Keywords: Delegation subkeys key hierarchy Zero-Knowledge Proofs Knowledge Complexity Threshold Schemes gradual release of secrets Signature Schemes Non-Interactive Zero-Knowledge Commitment Schemes.
Contact author(s): oded @ wisdom weizmann ac il
History: 1998-08-01: last of 2 revisions; 1997-09-16: received
Short URL: https://ia.cr/1997/012
License: CC BY

BibTeX

@misc{cryptoeprint:1997/012,
      author = {Oded Goldreich and Birgit Pfitzmann and Ronald L.  Rivest},
      title = {Self-Delegation with Controlled Propagation - or - What If You Lose Your Laptop.},
      howpublished = {Cryptology ePrint Archive, Paper 1997/012},
      year = {1997},
      note = {\url{https://eprint.iacr.org/1997/012}},
      url = {https://eprint.iacr.org/1997/012}
}