<HTML>
<HEAD>
<TITLE>Re: [Lustre-devel] Security issues</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
<BR>
<BR>
On 8/13/08 12:40 PM, "James Hughes" <<a href="James.Hughes@Sun.COM">James.Hughes@Sun.COM</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
<BR>
On Mon, 2008-08-11 at 13:33 -0600, Peter Braam wrote:<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'> >> <BR>
>> You do need to sign it and encrypt it - for multiple purposes, to secure the<BR>
>> wire transaction and for storage on the server.<BR>
> <BR>
> Sorry I'm still a little confused. To be exactly clear, do you mean: In<BR>
> the future we'll use NASD-style protocol to secure the bulk data's wire<BR>
> transfer & storage on server; and for now we can simply leave the bulk<BR>
> data unprotected?<BR>
<BR>
No you need to be able to encrypt it.<BR>
<BR>
I'm just stating that if you the current solution (which gives privacy using<BR>
GSS between client and OSS iirc) is going to be changed, then please change<BR>
it in the correct way to accommodate re-using checksums and re-using the<BR>
encrypted data for storage. Doing either of these things twice is<BR>
pointless.<BR>
</SPAN></FONT></BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>The NASD protocols do not allow for the encryption of the communications and the stored information to be the same. The key management for communications is well understood, but the key management for the stored information as defined by NASD requires the encryption of the stored information to be performed at the target. <BR>
<BR>
</SPAN></FONT></BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Why? I don’t see a reason not to pursue this, even though it would not be what NASD does. <BR>
<BR>
Using EAs there are easy key management systems (and more complex ones), and we discussed an basic key server running inside the MDS’s with the tri-labs who reacted quite positively.<BR>
<BR>
Peter<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'> Probably there should be options not to do so as part of the configuration.<BR>
<BR>
Peter<BR>
<BR>
<BR>
</SPAN></FONT></BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
</SPAN></FONT></BLOCKQUOTE>
</BODY>
</HTML>