kmip-interop-tech — archive

[Mathias Bjorkqvist]

All, Here are my summary notes from today's interop call. Please let me know of any additions/corrections you might have. Best Regards, Mathias KMIP interop 2011-07-14 Quick summary of recently uploaded KMIP v1.1 Committee Draft 01 Use Cases document Some errors/issues already spotted which are to be corrected for the next release: -Need to remove extra line changes in the hex bytes of the requests at time 7 and 8 in UC 13.2 -Need to correct the name of UC 13.4 (suggested new name "Use-case: Register Key Pair, Certify and Re-certify Public Key") -Need to correct the tag value of the Encoding Option field in UC 14.1 (from 0x421051 to 0x4200A3) Cryptsoft server updated to support use cases 12.2, 16.1, client updated and tested against IBM server. IBM server updated with support for all use cases (also 16.1), however support for 14.1 is currently limited to 128-bit keys (UC document has 256-bit keys). HP and SafeNet servers up, no v1.1 features available and currently no schedule. Quintessence Labs trying out client, plan to have server before RSA Conference 2012. Tim contacted Dee and Jane of OASIS to ask about interest for an interop demo at RSA Conference 2012 in February/March 2012. OASIS interested, will check with larger group and get input from individual companies. Summary of changes from v1.0 to v1.1 of the KMIP Use Cases document: Section Time    Page    Change 1.1     -       6       Updated KMIP document references to v1.1 Committee Draft 01 1.1     -       6       Added normative reference to NISTKeyWrap 1.2     -       6       Added non-normative reference to KMIP-UG 3.1.3   0       13      Updated text to reflect the correct cryptographic algorithm and length of the 168-bit 3DES key 3.1.5   0       27      Changed the Cryptographic Usage Mask from Verify to Derive Key when registering a Secret Object 8       -       64      Minor edits to the section introduction text 8.1     0       65      Reordered Private and Public Key Unique Identifiers in the Create Key Pair response, changed the tags from Unique Identifier to Private/Public Key Unique Identifier 9.5     -       100     Added text to clarify that the fact that the Obtain Lease request fails for a compromised key is due to server policy 12      -       123     Minor edits to the section introduction text 12.2    -       125     Added new Query Vendor Extensions use case as 12.2 13      -       126     Added use cases for asymmetric key profiles as use cases 13.1-13.4 14      -       177     Added v1.1 key wrapping use case as 14.1. 14.1    0       178     Corrected the cryptographic length to indicate length in bits 14.1    1       179     Corrected the name of the key that is being registered to dataKey 14.1    1       179     Corrected the cryptographic length to indicate length in bits 15      -       183     Added v1.1 groups use cases as 15.1 and 15.2, Object Group Member tag value used is 0x4200AC (Fresh to be inserted as 0x4200A8 in post-KMIP v1.1 Specification CD-01) 15.2.           186     Removed "optional" from the description of the Fresh attribute