Re: [cicm] Key Identifers

Maybe the spirit of Girish's original question was whether we
implementers are permitted to modify the CICM test harness files
provided to us by MITRE.  It was my understanding (from the kickoff
telecon) that we vendors are only to modify the cicm.cpp and config.h
files, not the cicm.h, encrypt.cpp, and decrypt.cpp files.  (That is,
implementers are to complete the coding of the stubs in cicm.cpp.)  If
that understanding is correct, it limits implementers a bit as to what
functionality can be added.

So maybe the broader question is: are venders permitted/expected to
modify all the test harness files?

Thanks,
  Steve DiMedio
  L3 Communications
  856-338-4204

-----Original Message-----
From: cicm-bounces@ietf.org [mailto:cicm-bounces@ietf.org] On Behalf Of
Fitton, John
Sent: Friday, June 03, 2011 6:29 PM
To: CICM Discussion List
Subject: Re: [cicm] Key Identifers

I would imagine that one method would be for the entity desiring to
obtain key identifiers would be to list the attributes of the keys that
it is interested in. By passing in such an attribute list, then a
compilation of the key identifiers which satisfy the attribute list
could be provided. Proper Least Privilege restrictions would restrict
the entity from including any attributes in the request that are not
consistent with the applications needs. These "needs" could be listed in
a security policy which is enforced by the Security Model. In that way
the application could only find out about keys which a constrained to
that attribute set.

________________________________
From: Nanjundiah, Girish [Girish.Nanjundiah@viasat.com]
Sent: Thursday, June 02, 2011 7:17 PM
To: CICM Discussion List
Subject: [cicm] Key Identifers

Hello Everyone,

Sorry if this question is extremely obvious or just hasn't been answered
but I'm a little confused as to how we are meant to access the
CICM::CharString identifier attribute of the CICM::Key class. I'm
assuming attributes are all private or protected, so how is one to
access the identifier? While it is easy to obtain its value with
CICM::Key::export, I can't seem to find a way to set it without adding
another function or a constructor for the CICM::Key class...

Thanks,
-Girish Nanjundiah
_______________________________________________
cicm mailing list
cicm@ietf.org
https://www.ietf.org/mailman/listinfo/cicm