Key management (cont)

• To use X-KISS, keys must be properly managed
• This means, one should be able to:
  • register a key (store information bound to a key pair)
  • revoke a key
  • reissue a key (eg, if previously revoked)
  • recover a private key
• X-KRSS defines a protocol to do that
  • XML Key Registration Service Specification