How does certificate-based encryption solve key revocation problem?
For example, if a user accidentally reveals its secret key or an attacker compromises it, the user may request revocation of its certificate. Alternatively, the user's company may request revocation if the user leaves the company or changes position and is no longer entitled to use the key.
My questions are:
- How can we do this process in certificate-based encryption and how different is it compared to PKE (that uses CRL or OCSP for certificate revocation)?
- In the case of signature, how can a user verify the validity of verification keys? How can the user check whether the key is valid and not revoked?