Groups - Kaliski - Nightingale Signatures.zip uploaded

[bkaliski@rsasecurity.com]

The document Kaliski - Nightingale Signatures.zip has been submitted by Burt Kaliski (bkaliski@rsasecurity.com) to the OASIS Digital Signature Services TC document repository.

Document Description:
"Trustworthy On-Line Signatures: The Nightingale Approach"

In the standard approach to on-line digital signatures, a user obtains
authentication credentials from an authentication server, then presents
the credentials to a signature server to obtain a signature on a message.
Though helpful architecturally, the approach presents two points of
compromise, since an attacker who compromises the authentication server
can impersonate the user. This talk describes a new method, based on
the Nightingale authentication technology, where two servers jointly
participate in each step, but neither has sufficient information to
impersonate the user or generate a signature. The result is an on-line
signature system that is both convenient and trustworthy.

Presented at RSA Conference 2003 Europe.

Download Document:  
http://www.oasis-open.org/apps/org/workgroup/dss/download.php/4279/Kaliski%20-%20Nightingale%20Signatures.zip

View Document Details:
http://www.oasis-open.org/apps/org/workgroup/dss/document.php?document_id=4279


PLEASE NOTE:  If the above links do not work for you, your email application
may be breaking the link into two pieces.  You may be able to copy and paste
the entire link address into the address field of your web browser.