re: data/digest_decrypt_key

From: Shalom Bresticker (Shalom.Bresticker@freescale.com)
Date: Wed Feb 02 2005 - 05:46:36 PST

  • Next message: Shalom Bresticker: "Re: Minutes of Encryption group meeting, 19-Jan-2005 (1600 UTC)"

    I looked at this a little more.
    The term 'asymmetric encryption algorithm' is used a few times in the main text,
    but not defined.
    The term 'symmetric' is used a few times in Annex H, but also not defined.
    You have to remember that while a tool implementor will probably give this section
    to an employee who understands protection schemes,
    this is not true of a user. The section has to be written so that a user who is a
    designer or verifier can understand it. Most will probably have less
    background in encryption/decryption schemes than I do. I have a little because
    I had a little interest in it when I was in college.

    I looked again at the description of data_decrypt_key. There is nothing there that
    implies that the key is symmetric or that it is an encryption key. The entire
    description relates to it only as a decryption key. These two keywords are also the
    only two keywords which mix the encryption and decryption terminology.

    I really think this section is not mature editorially, with no reflection on its
    technical quality.

    Shalom

    > > 4.5) Table 28-1 contains:
    > >
    > > data_decrypt_key Specifies the data encryption session key
    > > digest_decrypt_key Specifies the digest encryption session key
    > >
    > > From the text in 28.3.14 and 28.3.20, it seems that these are
    > > decryption keys, not encryption keys?
    > >
    > > -> These pragma expressions record the symmetric algorithm key
    > > used during encryption. Does this need further explanation in
    > > the text?
    >
    > I have not read the text in a systematic way. 'symmetric' means the same
    > key is used for both encryption and decryption? Where does the text say that?
    > Yes, if so, a reminder should be stated here. I'll add a few more words on this
    > later. 

    --
Shalom Bresticker                        Shalom.Bresticker @freescale.com
Design & Verification Methodology                    Tel: +972 9  9522268
Freescale Semiconductor Israel, Ltd.                 Fax: +972 9  9522890
POB 2208, Herzlia 46120, ISRAEL                     Cell: +972 50 5441478

    [ ]Freescale Internal Use Only      [ ]Freescale Confidential Proprietary

    This archive was generated by hypermail 2.1.4 : Wed Feb 02 2005 - 05:31:35 PST and
    sponsored by Boyd Technology, Inc.