Certificate authority
cryptography, body
(CA or “Trusted Third Party”) An entity (typically a company) that issues digital certificates to other entities (organisations or individuals) to allow them to prove their identity to others. A Certificate Authority might be an external company such as VeriSign that offers digital certificate services or they might be an internal organisation such as a corporate MIS department. The Certificate Authority’s chief function is to verify the identity of entities and issue digital certificates attesting to that identity.
The process uses public key cryptography to create a “network of trust”. If I want to prove my identity to you, I ask a CA (who you trust to have verified my identity) to encrypt a hash of my signed key with their private key. Then you can use the CA’s public key to decrypt the hash and compare it with a hash you calculate yourself. Hashes are used to decrease the amount of data that needs to be transmitted. The hash function must be cryptographically strong, e.g. MD5.
(http://home.netscape.com/comprod/server_central/support/faq/certificate_faq.html#11).
(1998-03-30)
Read Also:
- Certificate-of-indebtedness
a short-term, negotiable, interest-bearing note representing indebtedness.
- Certificate-of-admeasurement
a certificate issued by a government authority, showing the registered tonnages of a commercial vessel.
- Certificate-of-deposit
a written acknowledgment of a bank that it has received from the person named a specified sum of money as a deposit, often for a fixed term at a specified interest rate. Abbreviation: CD, C.D. noun a negotiable certificate issued by a bank in return for a deposit of money for a term of up […]
- Certificate-of-enrollment
a document issued to a U.S. vessel of 20 tons gross or more, engaged in fishing or in trade along the U.S. coast, on the Great Lakes, or on U.S. inland waters.
- Certificate-of-incorporation
a statement filed with a state official in forming a corporation, stating its name, purposes, the distribution of its stock, etc. noun (company law) a signed statement by the Registrar of Companies that a company is duly incorporated