Re: [kmip-interop-tech] Use case 3.1.3

Hi Tim, thanks for pointing this out.  We should probably correct the text to match the data in that case.

I think we should highlight the disconnect between cryptographic length and the actual length of the key material.  This can be confusing to folks new to cryptography who might think that a 168 bit 3DES key should be 21 bytes when it's really 24.

The spec has the following references:

In 2.1.3 Key block (Cryptographic length example values):

	3DES keys are typically from 112 to 192 bits (depending upon key length and the presence of parity bits)

In 3.5 Cryptographic Length:

	Cryptographic Length is the length in bits of the clear-text cryptographic key material of the Managed Cryptographic Object.

Use case 3.1.3 has Cryptographic Length 168 and 24 bytes (192 bits) of key material.  I might infer from the text of the spec that 3DES keys with parity bits have cryptographic length 192.

There is related to a topic Judith and Bruce were discussing on the list with respect to asymmetric keys back in July.

Thanks

-Alan

>