kmip-interop-tech — archive

[Alan Frindell]

Hi Tim, thanks for pointing this out. We should probably correct the text to match the data in that case. I think we should highlight the disconnect between cryptographic length and the actual length of the key material. This can be confusing to folks new to cryptography who might think that a 168 bit 3DES key should be 21 bytes when it's really 24. The spec has the following references: In 2.1.3 Key block (Cryptographic length example values): 3DES keys are typically from 112 to 192 bits (depending upon key length and the presence of parity bits) In 3.5 Cryptographic Length: Cryptographic Length is the length in bits of the clear-text cryptographic key material of the Managed Cryptographic Object. Use case 3.1.3 has Cryptographic Length 168 and 24 bytes (192 bits) of key material. I might infer from the text of the spec that 3DES keys with parity bits have cryptographic length 192. There is related to a topic Judith and Bruce were discussing on the list with respect to asymmetric keys back in July. Thanks -Alan >