| Title |
Design of a FROST-based Distributed SCT Issuance Architecture for Certificate Transparency |
| Authors |
양우성(Wooseong Yang) ; 유동현(Donghyun Yu) |
| DOI |
https://doi.org/10.5573/ieie.2026.63.9.74 |
| Keywords |
Certificate transparency; Distributed signature; Threshold signature; Signed certificate timestamp |
| Abstract |
Existing centralized Certificate Transparency (CT) log systems suffer from Single Point of Failure(SPOF) and availability issues. To address this, this study comparatively analyzes large-scale distributed signature schemes applicable to the CT log environment?namely CoSi, ByzCoin, MuSig, and FROST?and outlines their differences in terms of communication latency, network management overhead, and fault tolerance. In particular, CoSi is vulnerable to intermediate node failures, while MuSig, which operates on an -- structure, requires the consensus of all participants, thereby limiting its availability. In contrast, FROST, as a -- threshold signature scheme, tolerates partial failures while supporting efficient distributed signing. By contextualizing these characteristics for the CT log environment, this paper proposes a distributed Signed Certificate Timestamp (SCT) issuance architecture comprising a participant set and a Signature Aggregator (SA). Furthermore, we derive a design framework that enables integrity verification prior to certificate registration. |