Re: Threat Model
On Tuesday 13 April 2004 08:19 pm, Nixon, Bob wrote:
> [...]
> The basic intention of the T10 protection information is that it is
> generated by the application that writes the data, persisted by the storage
> until overwritten, and returned unmodified to the reading application for
> verification. It is allowed to be checked at points in transit, but the
> storage is considered a point in transit, not an end point.
This sounds like we cannot use it (since it belongs to the application),
but then...
> The allowance for recalculation is to permit intermediate storage
> virtualization devices to overload a single instance of the protection
> information field with both application-to-virtualizer and
> virtualizer-to-physical media protection information. It is recognized that
> this will lose some of the protection afforded by true writer-to-reader
> integrity data.
So the encryption device would be a "virtualizer"? I still don't see
how this would work.
-- Shai