Skip to content

Proposal: Introduce Coverage of Encryption and Compression in File Objects

mobhutu edited this page Dec 12, 2013 · 5 revisions

Status: Open
Comment Period Closes: ?
Affects Backwards Compatibility: No
Relevant Issues: https://github.com/CybOXProject/schemas/issues/237

Background Information

This proposal concerns the File Object and its ability to accurately characterize files that have been encrypted and/or compressed. The File Object currently does not have fields to represent encryption or compression, hence the purpose for this proposal.

Proposal

The File Object will be expanded with the following fields:

Field Description
Encryption_Algorithm he Encryption_Algorithm field specifies the algorithm used to encrypt the file.
Encryption_Key The Encryption_Key field specifies the key used to encrypt the file.
Compression_Method The Compression_Method field specifies the method used to compress the file.
Compression_Version The Compression_Version field specifies the version of the compression method used to compress the file.
Compression_Comment The Compression_Comment field specifies the comment string associated with the compressed file.

Impact

No other datatypes are effected by this change and there are no foreseen backwards compatibility issues.

Requested Feedback

  1. Do these additional fields and their annotations make sense?
  2. Are there any other fields that should be added for complete characterization of encryption and compression?
Clone this wiki locally