Modeling and Evaluation of Certification Path Discovery in the Emerging Global PKI

Overview

Establishing trust on certificates across multiple domains requires an efficient certification path discovery algorithm. Previously, small examples are used to analyze the performance of certification path discovery. This paper proposes and implements a simulation framework and a probability search tree model for systematic performance evaluation. Built from measurement data collected from current PKI systems in development and deployment over more than 10 countries, this model is the largest simulated PKI architecture to-date.