OASIS Open

Thales e-Security

Query enhancements + Attributes

I do not believe that creating a full object and attributes for RNG would fall under what we are trying to do in OASIS KMIP TC. I believe that it falls too far inside implementation which is best left for organizations to determine. I have no issue with RNG being an attribute of an object but not a full object itself.

In most organizations, RNGs are local to where the key is generated (either the device itself or the key manager). In the cases where it is a third entity, it is usually enforced by the application or the organization and therefor should not fall under KMIP as anything other than a way to identify where the key object was generated as an attribute.