Feasibility and Efficiency Analysis of Distributing the Certificate Revocation List by P2P Network

The management organization of the large-scale PKI (public key infrastructure) generally adopts the CRL (certificate revocation list) to collect the invalid digital certificates due to the password disclosure and expiration. It is the core issue that how to increase the distribution efficiency of CRL to decrease the deployment cost. In the paper, it discussed the feasibility of distributing the digital certificate revocation list by P2P network and dealt with the quantitative analysis on the distribution efficiency. Then it compared the results with the traditional distribution method.