updated draft text for "relevant standards" in OASIS vote on KMIP v1.1 docs

["Griffin, Robert" <robert.griffin@rsa.com>]

Hi –

 

Here’s at a cut at revised text for the "other relevant standards" section of the request form, for discussion in our KMIP TC call this week:

 

 

As a transport-level protocol, KMIP is complementary to other key management standards efforts, including OASIS EKMI and the W3C Web Cryptography API. Both those standards express application-level interfaces for key management and, in the case of the W3C effort, cryptographic operations. KMIP on the other hand specifies a wire format on which these application-level interfaces could be layered.

 

KMIP also leverages other standards whenever possible. For example, it uses the key life-cycle specified in NIST Special Publication 800-57 to define attributes related to key states. It uses network security mechanisms such as TLS to establish authenticated communication between the key management system and the cryptographic client. It relies on existing standards for encryption algorithms, key derivation and many other aspects of a cryptographic solution, focusing on the unique and critical problem of interoperable messages between key management servers and cryptographic clients.

 

 

 

Regards,

Bob

-------------------------------------------------------------------------------------------------------------------------------------------------------------

From: Griffin, Robert
Sent: Thursday, August 09, 2012 1:25 PM
To: 'kmip@lists.oasis-open.org'
Subject: additional materials required for submission of KMIP spec and profiles to OASIS membership

 

Hi –

 

As called out in the attached pdf of the form for requesting submission of candidate standards to the OASIS membership, we have to provide several additional items of information. I’ve included in the attached Word doc a cut at the 1) description of KMIP and 2) relationship to other standards.  This version is based on what we used in submitting the V1.0 docs.  Please take a look and let me know of any changes/suggestions/corrections. We’ll also discuss in our call later today.

 

Thanks!

 

Bob