《IEEE-1619.1-2007.pdf》由会员分享，可在线阅读，更多相关《IEEE-1619.1-2007.pdf（57页珍藏版）》请在三一文库上搜索。
1、IEEE Std 1619.1-2007 IEEE Standard for Authenticated Encryption with Length Expansion for Storage Devices IEEE 3 Park Avenue New York, NY 10016-5997, USA 16 May 2008 IEEE Computer Society Sponsored by the Storage Systems Standards Committee and Information Assurance Standards Committee 1619.1 TM Cop
2、yright The Institute of Electrical and Electronics Engineers, Inc. Provided by IHS under license with IEEELicensee=IHS Employees/1111111001, User=Japan, IHS Not for Resale, 07/30/2008 01:27:58 MDTNo reproduction or networking permitted without license from IHS -,-,- Copyright The Institute of Electr
3、ical and Electronics Engineers, Inc. Provided by IHS under license with IEEELicensee=IHS Employees/1111111001, User=Japan, IHS Not for Resale, 07/30/2008 01:27:58 MDTNo reproduction or networking permitted without license from IHS -,-,- Recognized as an IEEE Std 1619.1-2007 American National Standar
4、d (ANSI) IEEE Standard for Authenticated Encryption with Length Expansion for Storage Devices Sponsor Information Assurance Standards Committee and Storage Systems Standards Committee of the IEEE Computer Society Approved 15 April 2008 American National Standards Institute Approved 5 December 2007 I
5、EEE-SA Standards Board Copyright The Institute of Electrical and Electronics Engineers, Inc. Provided by IHS under license with IEEELicensee=IHS Employees/1111111001, User=Japan, IHS Not for Resale, 07/30/2008 01:27:58 MDTNo reproduction or networking permitted without license from IHS -,-,- Abstrac
6、t: Cryptographic and data authentication procedures for storage devices that support length expansion, such as tape drives, are specified. Such procedures include the following cryptographic modes of operation for the AES block cipher: CCM, GCM, CBC-HMAC, and XTS- HMAC. Keywords: authentication, CBC
7、, CCM, cryptography, data storage, encryption, GCM, HMAC, security, tape drive, variable-length block, XTS _ The Institute of Electrical and Electronics Engineers, Inc. 3 Park Avenue, New York, NY 10016-5997, USA Copyright 2008 by the Institute of Electrical and Electronics Engineers, Inc. All right
8、s reserved. Published 16 May 2008. Printed in the United States of America. IEEE is a registered trademark in the U.S. Patent and Trademark Office, owned by the Institute of Electrical and Electronics Engineers, Incorporated. PDF: ISBN 978-0-7381-5360-5 STD95753 Print: ISBN 978-0-7381-5361-2 STDPD95
9、753 No part of this publication may be reproduced in any form, in an electronic retrieval system or otherwise, without the prior written permission of the publisher. Copyright The Institute of Electrical and Electronics Engineers, Inc. Provided by IHS under license with IEEELicensee=IHS Employees/11
10、11111001, User=Japan, IHS Not for Resale, 07/30/2008 01:27:58 MDTNo reproduction or networking permitted without license from IHS -,-,- IEEE Standards documents are developed within the IEEE Societies and the Standards Coordinating Committees of the IEEE Standards Association (IEEE-SA) Standards Boa
11、rd. The IEEE develops its standards through a consensus development process, approved by the American National Standards Institute, which brings together volunteers representing varied viewpoints and interests to achieve the final product. Volunteers are not necessarily members of the Institute and
12、serve without compensation. While the IEEE administers the process and establishes rules to promote fairness in the consensus development process, the IEEE does not independently evaluate, test, or verify the accuracy of any of the information contained in its standards. Use of an IEEE Standard is w
13、holly voluntary. The IEEE disclaims liability for any personal injury, property or other damage, of any nature whatsoever, whether special, indirect, consequential, or compensatory, directly or indirectly resulting from the publication, use of, or reliance upon this, or any other IEEE Standard docum
14、ent. The IEEE does not warrant or represent the accuracy or content of the material contained herein, and expressly disclaims any express or implied warranty, including any implied warranty of merchantability or fitness for a specific purpose, or that the use of the material contained herein is free
15、 from patent infringement. IEEE Standards documents are supplied “AS IS.” The existence of an IEEE Standard does not imply that there are no other ways to produce, test, measure, purchase, market, or provide other goods and services related to the scope of the IEEE Standard. Furthermore, the viewpoi
16、nt expressed at the time a standard is approved and issued is subject to change brought about through developments in the state of the art and comments received from users of the standard. Every IEEE Standard is subjected to review at least every five years for revision or reaffirmation. When a docu
17、ment is more than five years old and has not been reaffirmed, it is reasonable to conclude that its contents, although still of some value, do not wholly reflect the present state of the art. Users are cautioned to check to determine that they have the latest edition of any IEEE Standard. In publish
18、ing and making this document available, the IEEE is not suggesting or rendering professional or other services for, or on behalf of, any person or entity. Nor is the IEEE undertaking to perform any duty owed by any other person or entity to another. Any person utilizing this, and any other IEEE Stan
19、dards document, should rely upon the advice of a competent professional in determining the exercise of reasonable care in any given circumstances. Interpretations: Occasionally questions may arise regarding the meaning of portions of standards as they relate to specific applications. When the need f
20、or interpretations is brought to the attention of IEEE, the Institute will initiate action to prepare appropriate responses. Since IEEE Standards represent a consensus of concerned interests, it is important to ensure that any interpretation has also received the concurrence of a balance of interest
21、s. For this reason, IEEE and the members of its societies and Standards Coordinating Committees are not able to provide an instant response to interpretation requests except in those cases where the matter has previously received formal consideration. At lectures, symposia, seminars, or educational
22、courses, an individual presenting information on IEEE standards shall make it clear that his or her views should be considered the personal views of that individual rather than the formal position, explanation, or interpretation of the IEEE. Comments for revision of IEEE Standards are welcome from a
23、ny interested party, regardless of membership affiliation with IEEE. Suggestions for changes in documents should be in the form of a proposed change of text, together with appropriate supporting comments. Comments on standards and requests for interpretations should be addressed to: Secretary, IEEE-
24、SA Standards Board 445 Hoes Lane Piscataway, NJ 08854 USA Authorization to photocopy portions of any individual standard for internal or personal use is granted by the Institute of Electrical and Electronics Engineers, Inc., provided that the appropriate fee is paid to Copyright Clearance Center. To
25、 arrange for payment of licensing fee, please contact Copyright Clearance Center, Customer Service, 222 Rosewood Drive, Danvers, MA 01923 USA; +1 978 750 8400. Permission to photocopy portions of any individual standard for educational classroom use can also be obtained through the Copyright Clearan
26、ce Center. Copyright The Institute of Electrical and Electronics Engineers, Inc. Provided by IHS under license with IEEELicensee=IHS Employees/1111111001, User=Japan, IHS Not for Resale, 07/30/2008 01:27:58 MDTNo reproduction or networking permitted without license from IHS -,-,- iv Copyright 2008 I
27、EEE. All rights reserved. Introduction This introduction is not part of IEEE Std 1619.1-2007, IEEE Standard for Authenticated Encryption with Length Expansion for Storage Devices. The problem of data storage protection has become increasingly important due to legislation that requires the protection
28、 of sensitive information. To address this issue, the Security in Storage Working Group (SISWG) is developing standards for the protection of information on storage media. This standard provides strong data protection by specifying encryption with authentication and length expansion. This standard p
29、rovides methods suitable for ensuring the privacy and integrity of stored data within applications requiring a high level of assurance. To this end, this standard specifies the Advanced Encryption Standard (AES) cipher as used in authenticated-encryption modes. There are many modes of non-cryptograp
30、hic attacks that are outside the scope of this standard. See B.1 for a discussion. Notice to users Laws and regulations Users of these documents should consult all applicable laws and regulations. Compliance with the provisions of this standard does not imply compliance to any applicable regulatory
31、requirements. Implementers of the standard are responsible for observing or referring to the applicable regulatory requirements. IEEE does not, by the publication of its standards, intend to urge action that is not in compliance with applicable laws, and these documents may not be construed as doing
32、 so. Copyrights This document is copyrighted by the IEEE. It is made available for a wide variety of both public and private uses. These include both use, by reference, in laws and regulations, and use in private self- regulation, standardization, and the promotion of engineering practices and metho
33、ds. By making this document available for use and adoption by public authorities and private users, the IEEE does not waive any rights in copyright to this document. Updating of IEEE documents Users of IEEE standards should be aware that these documents may be superseded at any time by the issuance
34、of new editions or may be amended from time to time through the issuance of amendments, corrigenda, or errata. An official IEEE document at any point in time consists of the current edition of the document together with any amendments, corrigenda, or errata then in effect. In order to determine whet
35、her a given document is the current edition and whether it has been amended through the issuance of amendments, corrigenda, or errata, visit the IEEE Standards Association website at http:/ieeexplore.ieee.org/xpl/standards.jsp, or contact the IEEE at the address listed previously. For more informati
36、on about the IEEE Standards Association or the IEEE standards development process, visit the IEEE-SA website at http:/standards.ieee.org. Copyright The Institute of Electrical and Electronics Engineers, Inc. Provided by IHS under license with IEEELicensee=IHS Employees/1111111001, User=Japan, IHS No
37、t for Resale, 07/30/2008 01:27:58 MDTNo reproduction or networking permitted without license from IHS -,-,- v Copyright 2008 IEEE. All rights reserved. Errata Errata, if any, for this and all other standards can be accessed at the following URL: http:/standards.ieee.org/reading/ieee/updates/errata/i
38、ndex.html. Users are encouraged to check this URL for errata periodically. Interpretations Current interpretations can be accessed at the following URL: http:/standards.ieee.org/reading/ieee/interp/ index.html. Patents Attention is called to the possibility that implementation of this guide may requ
39、ire use of subject matter covered by patent rights. By publication of this guide, no position is taken with respect to the existence or validity of any patent rights in connection therewith. The IEEE is not responsible for identifying Essential Patent Claims for which a license may be required, for
40、conducting inquiries into the legal validity or scope of Patents Claims or determining whether any licensing terms or conditions provided in connection with submission of a Letter of Assurance, if any, or in any licensing agreements are reasonable or non- discriminatory. Users of this guide are expr
41、essly advised that determination of the validity of any patent rights, and the risk of infringement of such rights, is entirely their own responsibility. Further information may be obtained from the IEEE Standards Association. Participants When work on this standard began, the Security in Storage Wo
42、rking Group had the following officers: James P. Hughes, Chair Serge Plotkin, Vice-chair Fabio Maino, Secretary At the time this standard was submitted to the IEEE-SA Standards Board for approval, the Security in Storage Working Group operated under the following sponsorship: John L. Cole, Sponsor C
43、urtis Anderson, Co-Sponsor At the time this standard was submitted to the IEEE-SA Standards Board for approval, the Security in Storage Working Group had the following officers: Matthew V. Ball, Chair Eric A. Hibbard, Vice-chair Fabio Maino, Secretary At the time this standard was submitted to the I
44、EEE-SA Standards Board for approval, the P1619.1 Task Group had the following membership: Matthew V. Ball, Chair, Technical Editor Copyright The Institute of Electrical and Electronics Engineers, Inc. Provided by IHS under license with IEEELicensee=IHS Employees/1111111001, User=Japan, IHS Not for R
45、esale, 07/30/2008 01:27:58 MDTNo reproduction or networking permitted without license from IHS -,-,- vi Copyright 2008 IEEE. All rights reserved. Gideon Avida Matthew V. Ball Mark Benedikt Jon Buckingham William G. Colvin Russel S. Dietz Robert Drennan Hal Finney John Geldman Robert W. Griffin Shai
46、Halevi (past technical editor) Laszlo Hars Eric A. Hibbard Larry D. Hofer Jon Holdman Walter A. Hubis James P. Hughes (past technical editor) Glen Jaquette (past technical editor) Curt Kolovson Robert A. Lockhart Fabio R. Maino Charlie Martin Dalit Naor Landon Curt Noll Jim Norton Scott Painter Davi
47、d Peterson Serge Plotkin David B. Sheehy Robert N. Snively Alexander (Sandy) Stewart Greg Unruh Douglas L. Whiting Christopher L. Williams Mike Witkowski Special thanks to Brian Gladman, David McGrew, Michael Torla, and Danh Tran The following members of the balloting committee voted on this standar
48、d. Balloters may have voted for approval, disapproval, or abstention. Danilo Antonelli Matthew V. Ball Rahul B. Bhushan Juan C. Carreon Lidong Chen Keith Chow Roger Cummings Geoffrey Darnton Russell S. Dietz Thomas J. Dineen Robert C. Elliott Michael D. Geipel John Geldman Brian Goodman Robert W. Griffin Randall Groves Eric A. Hibbard Werner Hoelzl Larry D. Hofer Walter A. Hubis Raj Jain Robert A. Lockhart William Lumpkins Fabio R. Maino Edward McCall Michael Newman Landon Curt Noll Mark Overby Serge Plotkin Ulrich Pohl Venkatesha Pra