OASIS Open: Committees

CKA_GLOBAL attribute proposal

Do you accept the proposal for CKA_GLOBAL attribute?

Description: Do you accept the proposal for CKA_GLOBAL attribute as posted by Mike StJohns on 26-Jun-2013 at https://www.oasis-open.org/apps/org/workgroup/pkcs11/download.php/49718/pkcs11-cka-global.docx (also attached to this ballot as reference item) ? This proposal is a subset of the larger CKA_GLOBAL attribute proposal originally proposed by Mike StJohns; this subset addresses creation of and enumerations for the CKA_GLOBAL_ATTRIBUTE.

[ ]	Yes
[ ]	No
[ ]	Abstain

Opening:		Thursday, 27 June 2013 @ 07:00 am EDT
Closing:		Tuesday, 9 July 2013 @ 09:00 pm EDT
Group:		OASIS PKCS 11 TC

Ballot has closed.

Referenced Items
Name	Type	Date	Action
pkcs11-cka-global.docx (16K)	Document	2013-06-26	Details
02444: CKA_GLOBAL attribute proposal (37K)	Document	2013-07-09	Details

Voting Details

Voting Summary

Options with highest number of votes are bold

Option	# Votes	% of Total
Yes	5	24%
No	16	76%
Abstain	1

Eligible members who have voted:	21 of 34	62%
Eligible members who have abstained:	1 of 34	3%
Eligible members who have not voted:	12 of 34	35%

Voting Details

Voter	Company	Vote	Reference Document and/or Comment
Chris Zimman	Bloomberg Finance L.P.	No	Not fundamentally opposed to the idea, just that there's still discussion going on around details. I think it needs to be further vetted.
Tim Hudson	Cryptsoft Pty Ltd.	No
Magda Zdunkiewicz	Cryptsoft Pty Ltd.	No
Tony Cox	Cryptsoft Pty Ltd.	No
Christopher Duane	EMC	--
Robert Griffin	EMC	Yes
Ryan Smith	Futurex	--
Walter-John Turnes	Gemini Security Solutions, Inc.	Yes
Wan-Teh Chang	Google Inc.	--
Darren Krahn	Google Inc.	No
Gershon Janssen	Individual	No
Peter Gutmann	Individual	No	The semantics for these types of objects need more definition, is this just a read-only object (from a user's point of view)? If the driver or token manages them, why do they need to be user-visible?
Michael StJohns	Individual	Yes
Alex Krasnov	Infineon Technologies AG	--
Hal Lockhart	Oracle	--
Dina Kurktchi	Oracle	Abstain	Do deleted "global" objects come back after a token is reinitialized? Can I delete "global" objects at all? Making it hard for me to agree, but I don't feel that I must disagree either. I'm not sur
Susan Gleeson	Oracle	No
Radhika Siravara	Oracle	No
Oscar So	Oracle	No
Valerie Fenwick	Oracle	No
Mark Powers	Oracle	No
Michael Stevens	QuintessenceLabs Pty Ltd.	--
John Leiseboer	QuintessenceLabs Pty Ltd.	Yes
Stef Walter	Red Hat	No	Having an attribute like this makes sense. Would like to see this proposal come up again at a later time. However the current proposal does not seem to mesh well with other aspects of PKCS#11 objec
Robert Relyea	Red Hat	Yes
Doron Cohen	SafeNet, Inc.	--
Ajai Puri	SafeNet, Inc.	--
Andrey Jivsov	Symantec Corp.	No	I understand the concept of CKA_GLOBAL={CKV_TOKEN_GLOBAL=1, CKV_NOT_GLOBAL=0}, but other values seems to have limited value, to the degree that it will be hard for two vendors to have CKA_GLOBAL that
Mark Knight	Thales e-Security	--
Robert Burns	Thales e-Security	No
Sander Temme	Thales e-Security	No
Peter Bartok	Venafi, Inc.	--
David Smith	Venafi, Inc.	--
Janice Cheng	Vormetric, Inc.	--