A test-bed for certificate revocation policies

The public-key cryptography is widely used as the cryptographic basis to provide security services. The PKI is the infrastructure that supports the public-key cryptography and the revocation of certificates implies one of its major costs. The goal of this paper is to present a platform to test, to evaluate and to dimension certificate revocation systems. Finally using this platform some results in terms of down-link bandwidth and processing capacity requirements for the CRL, the OCSP and the AD-MHT are presented.