Identifying a compromised encoded data slice

1. A computer-implemented method for execution by one or more processing modules of a computing device, the method comprises:

in response to a read command, issuing at least a read threshold number of read requests regarding a set of encoded data slices, wherein a data segment is dispersed storage error encoded to produce the set of encoded data slices, wherein the data segment has a known integrity value, wherein a decode threshold number of encoded data slices of the set of encoded data slices is needed to recover the data segment, and wherein the read threshold number is greater than the decode threshold number;

receiving the at least the read threshold number of encoded data slices;

entering a loop that includes:

selecting a unique combination of encoded data slices from the set of the at least the read threshold number of encoded data slices, wherein the unique combination includes the decode threshold number of encoded data slices;

disperse storage error decoding the unique combination of encoded data slices to produce a recovered data segment;

generating an integrity value for the recovered data segment;

verifying the integrity value with the known integrity value;

when the integrity value is verified, indicating that the unique combination of encoded data slices is valid;

when the integrity value is not verified, indicating that the unique combination of encoded data slices is not valid;

repeating the loop when less than a desired number of unique combinations of encoded data slices have been processed; and

exiting the loop when the desired number of unique combinations of encoded data slices have been processed;

utilizing one of the recovered data segments corresponding to one of the valid unique combinations of encoded data slice as a response to the read command; and

identifying a compromised encoded data slice based on the unique combinations of encoded data slices that are not valid.

2. The computer-implemented method of claim 1 further comprises:

from an iteration of the loop to a next iteration of the loop:

selecting the unique combination of encoded data slices for the next iteration by changing one encoded data slice from the unique combination of encoded data slices for the iteration; and

when the integrity value is verified for the unique combination of encoded data slices for the iteration and when the integrity value is not verified for the unique combination of encoded data slices for the next iteration, identifying the one changed encoded data slice as being the compromised encoded data slice.

3. The computer-implemented method of claim 1 further comprises:

commencing a rebuilding process to rebuild the compromised encoded data slice.

4. The computer-implemented method of claim 1 , wherein the generating the integrity value comprises one of:

performing a deterministic function on the recovered data segment; and

compiling integrity values of the encoded data slices of the unique combination of encoded data slices.

5. The computer-implemented method of claim 1 , wherein the utilizing the one of the recovered data segments comprises one of:

utilizing the recovered data segment corresponding to the unique combination of encoded data slices that is a first unique combination to be found valid;

utilizing the recovered data segment corresponding to the unique combination of encoded data slices that is a last unique combination to be found valid; and

arbitrarily selecting the one of the recovered data segments.

6. The computer-implemented method of claim 1 , wherein the desired number of unique combinations comprises one of:

all possible unique combinations of the encoded data slices from the set of the at least the read threshold number of encoded data slices;

a number corresponding to changing the unique combinations of one encoded data slice per iteration of the loop; and

a calculated number based on the read threshold number and the decode threshold number.

7. The computer-implemented method of claim 1 further comprises:

performing, by a first processing module of the one or more processing modules, the loop until a first occurrence of the integrity value being verified; and

when the first occurrence of the integrity value being verified:

shifting performance of the loop to a second processing module of the one or more processing modules;

utilizing, by the first processing module, the one of the recovered data segments corresponding to the first occurrence of the integrity value being verified as the response to the read command; and

identifying, by at least one of the first and second processing modules, the compromised encoded data slice based on the unique combinations of encoded data slices that are not valid.

8. A dispersed storage (DS) processing module comprises:

an interface;

a memory;

a recover slices module, operably coupled to the interface and the memory, wherein the recover slices module, when operable within a computing device, causes the computing device to:

in response to a read command, issue at least a read threshold number of read requests regarding a set of encoded data slices, wherein a data segment is dispersed storage error encoded to produce the set of encoded data slices, wherein the data segment has a known integrity value, wherein a decode threshold number of encoded data slices of the set of encoded data slices is needed to recover the data segment, and wherein the read threshold number is greater than the decode threshold number; and

receive the at least the read threshold number of encoded data slices;

a slice validity module, operably coupled to the interface and the memory, wherein the slice validity module, when operable within the computing device, causes the computing device to:

enter a loop causing the computing device to:

select a unique combination of encoded data slices from the set of the at least the read threshold number of encoded data slices, wherein the unique combination includes the decode threshold number of encoded data slices;

disperse storage error decode the unique combination of encoded data slices to produce a recovered data segment;

generate an integrity value for the recovered data segment;

verify the integrity value with the known integrity value;

when the integrity value is verified, indicate that the unique combination of encoded data slices is valid;

when the integrity value is not verified, indicate that the unique combination of encoded data slices is not valid;

repeat the loop when less than a desired number of unique combinations of encoded data slices have been processed; and

exit the loop when the desired number of unique combinations of encoded data slices have been processed; and

a response module, operably coupled to the interface and the memory, wherein the response module, when operable within the computing device, causes the computing device to:

utilize one of the recovered data segments corresponding to one of the valid unique combinations of encoded data slice as a response to the read command; and

identify a compromised encoded data slice based on the unique combinations of encoded data slices that are not valid.

9. The DS processing module of claim 8 further comprises:

from an iteration of the loop to a next iteration of the loop:

the slice validity module further functions to select the unique combination of encoded data slices for the next iteration by changing one encoded data slice from the unique combination of encoded data slices for the iteration; and

when the integrity value is verified for the unique combination of encoded data slices for the iteration and when the integrity value is not verified for the unique combination of encoded data slices for the next iteration, the response module further functions to identify the one changed encoded data slice as being the compromised encoded data slice.

10. The DS processing module of claim 8 further comprises:

the response module further functions to commence a rebuilding process to rebuild the compromised encoded data slice.

11. The DS processing module of claim 8 , wherein the slice validity module functions to generate the integrity value by one of:

performing a deterministic function on the recovered data segment; and

compiling integrity values of the encoded data slices of the unique combination of encoded data slices.

12. The DS processing module of claim 8 , wherein the response module functions to utilize the one of the recovered data segments by one of:

utilizing the recovered data segment corresponding to the unique combination of encoded data slices that is a first unique combination to be found valid;

utilizing the recovered data segment corresponding to the unique combination of encoded data slices that is a last unique combination to be found valid; and

arbitrarily selecting the one of the recovered data segments.

13. The DS processing module of claim 8 , wherein the desired number of unique combinations comprises one of:

all possible unique combinations of the encoded data slices from the set of the at least the read threshold number of encoded data slices;

a number corresponding to changing the unique combinations of one encoded data slice per iteration of the loop; and

a calculated number based on the read threshold number and the decode threshold number.

14. The DS processing module of claim 8 further comprises:

the slice validity module further functions to perform the loop until a first occurrence of the integrity value being verified; and

when the first occurrence of the integrity value being verified:

the slice validity module further functions to shift performance of the loop to a second slice validity module;

the response module further functions to utilize the one of the recovered data segments corresponding to the first occurrence of the integrity value being verified as the response to the read command; and

at least one of the slice validity module and the second slice validity module, when operable within the computing device, causes the computing device to identify the compromised encoded data slice based on the unique combinations of encoded data slices that are not valid.