P074 - WEWoRC 2005 - Western European Workshop on Research in Cryptology

Auflistung nach:

1 - 1 von 1

Konferenzbeitrag
A scanning tool for PC root public key stores
(WEWoRC 2005 – Western European Workshop on Research in Cryptology, 2005) Alsaid, Adil; Mitchell, Chris J.
As has recently been demonstrated, a malicious third party could insert a self-issued CA public key into the list of trusted root CA public keys stored on an end user PC. As a consequence, the malicious third party could potentially do severe damage to the end user computing environment. In this paper, we discuss the problem of fake root public keys and suggest a solution that can be used to detect and remove them. We further describe a prototype implementation of this solution.