Security Without Obscurity, 2nd Edition

1 Introduction

DOI: 10.1201/9781003425298-1

Public key infrastructure (PKI) is an operational system that employs key management, cryptography, information technology (IT), information security (cybersecurity), legal matters, and business rules as shown in the Venn diagram in Figure 1.1 called PKI Cryptonomics.¹ While certainly there are business, legal, security, technology, and cryptography areas within any organization that function outside of a PKI, the fact is that a properly managed PKI requires all of these disparate disciplines to function effectively. The lack of one or more of these factors can undermine a PKI’s effectiveness and efficiency. Furthermore, all of these disciplines must interact and complement each other within a PKI ...