Group Meeting - Identity Based Cryptography
Today's meeting was about Identity Based Cryptography. Basically, it's a way to do public-key cryptography using someone's identity as their public key -- their actual public key. The idea is that an identity is well known, so it eliminates the problem of distributing public keys to everyone.
You take your identity and give it to a Key Creation Center (or something like that), over a secure channel, and it does some magic with its private key, and gives you your private key. Then, anyone can use you identity and run it through a public function to determine your public key. This means that you pay the one time connection cost of the KCC creating your private key, and you can recover everyone else's public keys from their identity. This reduces the problem of getting someone's public key to knowing their identity. In most cases, the identity would be an email address. This is really cool if it works, since getting public keys for people that you want to communicate with is one of the steps in a PKI (private key infrastructure) that would require a round trip time (RTT), which is expensive in a disconnected network.
