Thanks Lev! That definitely cleared up some things for me.

Hema

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of 
Novikov, Lev
Sent: Wednesday, March 09, 2011 10:47 AM
To: CICM Discussion List
Subject: Re: [cicm] Channel and Conduit

Hema,

On 2011-03-09 12:41, Hema Krishnamurthy wrote:
> So, if I have a single security domain only system with a single client 
> program,
> to encrypt/decrypt, would I use the CoProcessor namespace or would I just use
> the Encrypt/Decrypt ones?

If you only have a single domain (e.g., storing encrypted data to a database),
you would create a CICM::Coprocessor::Encrypt (or ::Decrypt) conduit because
you want the result of the encrypt (or decrypt) operation to return to the
same client program that asks to encrypt (or decrypt) the data.

You would use the CICM::Encrypt and CICM::Decrypt channels in a more typical
high assurance scenario in which the results of the operation are not in the 
same
domain that initiates the operation.

Lev
_______________________________________________
cicm mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/cicm

This e-mail and any files transmitted with it may be proprietary and are 
intended solely for the use of the individual or entity to whom they are 
addressed. If you have received this e-mail in error please notify the sender.
Please note that any views or opinions presented in this e-mail are solely 
those of the author and do not necessarily represent those of ITT Corporation. 
The recipient should check this e-mail and any attachments for the presence of 
viruses. ITT accepts no liability for any damage caused by any virus 
transmitted by this e-mail.
_______________________________________________
cicm mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/cicm

Reply via email to