Enhancing pki-based authentication protocols in cloud systems through integration of multi-party computation and zero-knowledge proofs

To overcome the structural limitations of traditional PKI, namely risk centralization, operational complexity, costly HSM dependence, and quantum vulnerability, this article presents a novel architecture that synergistically integrates Multi-Party Computation (MPC) and Zero-Knowledge Proofs (ZKPs) to strengthen authentication protocols in cloud environments.The proposed architecture is a hybrid PKI-MPC-ZKP system based on six fundamental principles: radical distribution of trust, defense in depth, verifiable trust through cryptographic proofs, modularity, interoperability, and native scalability. It consists of an augmented Certification Authority (CA), a geographically distributed MPC cluster, integrated ZKP modules, and advanced support services.Experimental results, obtained in a cloud environment replicating enterprise conditions (Kubernetes on AWS, m5 instances, multi-zone), demonstrate robust operational performance: an average latency of 392 ms for a signature, a throughput of 12.1 signatures per second, and 99.99% availability. The architecture supports up to two Byzantine nodes without system compromise and preserves data confidentiality through ZKPs.A comparative analysis highlights the advantages of the proposed solution over classical PKI and modern alternatives (blockchain, FIDO2, post-quantum cryptography), with a 40% reduction in total cost of ownership over 5 years and a notable improvement in security and resilience.