Certificateless data verification with revocable signatures

1. A method comprising:

accessing, by a processor of a machine an encrypted data packet from a first source, the encrypted data packet being accompanied by a signature of the first source;

accessing, by the processor, parameters from a second source, the parameters comprising a plurality of hash functions and a set of values, the set of values comprising results from evaluation of a corresponding set of equations, the evaluation operating on a time value;

verifying, by the processor, based on the signature of the first source and the parameters, that the encrypted data packet was generated by the first source, the verifying comprising determining, based on the set of values, that the first source corresponds to an authorized leaf node in a tree maintained by the second source; and

based on the verification that the encrypted data packet was generated by the first source, decrypting, by the processor, the encrypted data packet.

2. The method of claim 1 , wherein:

the signature of the first source comprises a first key and a second key; and

the verifying that the encrypted data packet was generated by the first source comprises applying the plurality of hash functions to the first key and the second key.

3. The method of claim 2 , wherein:

the verifying that the encrypted data packet was generated by the first source comprises applying the plurality of hash functions to a message portion of the encrypted data packet.

4. The method of claim 1 , wherein:

the parameters from the second source comprise a time value; and

the verifying that the encrypted data packet was generated by the first source is further based on the time value.

5. The method of claim 1 , further comprising:

accessing a name associated with the encrypted data packet; and

verifying that the name corresponds to the first source.

6. A system comprising:

a communication device configured to:

access an encrypted data packet from a first source, the encrypted data packet being accompanied by a signature of the first source; and

access parameters from a second source, the parameters comprising a plurality of hash functions and a set of values, the set of values comprising results from evaluation of a corresponding set of equations, the evaluation operating on a time value;

a processor-implemented verification device configured to:

verify, based on the signature of the first source and the parameters, that the encrypted data packet was generated by the first source, the verifying comprising determining, based on the set of values, that the first source corresponds to an authorized leaf node in a tree maintained by the second source; and

decryption device configured to:

based on the verification that the encrypted data packet was generated by the first source, decrypt the encrypted data packet.

7. The system of claim 6 , wherein:

the signature of the first source comprises a first key and a second key; and

the verifying that the encrypted data packet was generated by the first source comprises applying the plurality of hash functions to the first key and the second key.

8. The system of claim 7 , wherein:

the verifying that the encrypted data packet was generated by the first source comprises applying the plurality of hash functions to a message portion of the encrypted data packet.

9. The system of claim 6 , wherein:

the parameters from the second source comprise a time value; and

the verifying that the encrypted data packet was generated by the first source is further based on the time value.

10. The system of claim 6 , wherein the verification device is further configured to:

access a name associated with the encrypted data packet; and

verify that the name corresponds to the first source.

11. A machine-readable medium not having any transitory signals and having instructions embodied thereon which, when executed by one or more processors of a machine, cause the machine to perform operations comprising:

accessing an encrypted data packet from a first source, the encrypted data packet being accompanied by a signature of the first source;

accessing parameters from a second source, the parameters comprising a plurality of hash functions and a set of values, the set of values comprising results from evaluation of a corresponding set of equations, the evaluation operating on a time value;

verifying, based on the signature of the first source and the parameters, that the encrypted data packet was generated by the first source, the verifying comprising determining, based on the set of values, that the first source corresponds to an authorized leaf node in a tree maintained by the second source; and

based on the verification that the encrypted data packet was generated by the first source, decrypting the encrypted data packet.

12. The machine-readable medium of claim 11 , wherein:

the signature of the first source comprises a first key and a second key; and

the verifying that the encrypted data packet was generated by the first source comprises applying the plurality of hash functions to the first key and the second key.

13. The machine-readable medium of claim 12 , wherein:

the verifying that the encrypted data packet was generated by the first source comprises applying the plurality of hash functions to a message portion of the encrypted data packet.

14. The machine-readable medium of claim 11 , wherein:

the parameters from the second source comprise a time value; and

the verifying that the encrypted data packet was generated by the first source is further based on the time value.