Re: [kmip] Clarification on Key Value for wrapped objects

[Tim Hudson <tjh@cryptsoft.com>]

I have now uploaded corrected versions of TC-WRAP-*-14 where the KeyValue handling for wrapped keys has been changed to be a ByteString.

Thanks,

Tim.

On Tue, Sep 5, 2017 at 2:06 AM, Gabriel Mandaji <gabriel@kryptus.com> wrote:

Hi all,

While running tests TC-WRAP-*-14, I started to wonder how to properly format Key Values for wrapped objects and would really appreciate any help to clarify that.

Those tests expect wrapped keys to be within a Key Material, both when registering and when retrieving wrapped objects. E.g.:

<KeyValue>

    <KeyMaterial type="ByteString" value="1fa68b0a8112b447aef34bd8fb5a7b829d3e862371d2cfe5"/>

</KeyValue>

However, that seems to go against what is defined on the specification. The Key Value's description states that it may either be a Structure, if the object is not wrapped, or a Byte String, if the object is wrapped.

Therefore, I would expect wrapped objects to have a Key Value without any Key Material. E.g.:

<KeyValue type="ByteString" value="1fa68b0a8112b447aef34bd8fb5a7b829d3e862371d2cfe5"/>

Which is the correct format?

Best Regards,

Gabriel Francisco Mandaji,

Desenvolvedor de Software

KRYPTUS EED S/A
Trust in Cybersecurity
+55 19 3112 5000

www.kryptus.com

====================