Compression of cryptographic chaining certificates

A system for establishing secure connections using compressed cryptographic chaining certificates, the system comprising:

• one or more processors;
• and
• a machine-readable medium comprising instructions stored therein, which when executed by the processors, cause the processors to perform operations comprising:
• receiving a first compact representation corresponding to a first certificate together with a second certificate for validating a first entity at a second entity, the first certificate having been determined by the first entity as having a higher probability than the second certificate of having been previously stored at the second entity;
• retrieving one or more compact representations locally available to the second entity;
• comparing the first compact representation to the one or more compact representations;
• determining if the first compact representation matches at least one of the one or more compact representations;
• retrieving the first certificate locally available at the second entity and corresponding to the at least one of the one or more compact representations if the first compact representation matches the at least one of the one or more compact representations;
• and
• establishing a secure connection between the first entity and the second entity based at least in part on the retrieved first certificate and the received second certificate.

A non-transitory machine-readable medium comprising instructions stored therein, which when executed by a machine, cause the machine to perform operations comprising:

• receiving compact representations corresponding to all certificates in a complete certificate chain for validating a first entity at a second entity without receiving any certificates of the certificate chain with the compact representations;
• retrieving a local list of one or more compact representations corresponding to one or more certificates locally available to the second entity;
• comparing each of the received compact representations of the certificates to the one or more compact representations within the local list;
• retrieving the certificates of the certificate chain that correspond to the compact representations;
• and
• validating the first entity using the retrieved certificates of the certificate chain that correspond to the compact representations.