Re: [P1619-2] Question: Should we only allow one data unit size within a key scope?

["Robert A. (Bob) Lockhart" <rlockhart@xxxxxxxx>]

Matt,

If I understand what you are asking I think this is an implementation issue and not a specific mode issue.  If someone wants to build an implementation that makes use of variable data unit sizes that should be their call as long as they can determine the sizes of the data units.

 

Doesn't do much for interoperability but it does leave the mode extensible for different applications and open to other standards to make use of it in a way that suits their needs.

 

Bob L.

Robert A. (Bob) Lockhart
Senior Solutions Architect
Thales Information Systems Security

Matt Ball wrote:

Hi Folks,

One of the questions from the P1619.2 sponsor ballot is as follows:

(Page 4, Subclause 5, line 12): Note that for IEEE Std 1619-2007, all data units within a particular key scope are required to have the same size. The sentence here allows for them to be different sizes. Do we want this? If different sizes are allowed, how does an implementation track each size, and are there security implications with an adversary being potentially able to change these sizes, since there is no authentication in this system?

What are the thoughts from the group?

--
Thanks!

Matt Ball, Chair, IEEE P1619 Security in Storage Working Group
Staff Engineer, Sun Microsystems, Inc.
500 Eldorado Blvd, Bldg #5 BRM05-212, Broomfield, CO 80021
Work: 303-272-7580, Cell: 303-717-2717