Generating a trusted rebuilt appended encoded data slice
A method for execution by one or more computing devices includes generating current slice integrity check value information for a rebuilt appended encoded data slice of a set of appended encoded data slices stored in a set of storage units of the storage network, where an appended encoded data slice of the set of appended encoded data slices includes an encoded data slice of a set of encoded data slices and slice integrity check value information for the encoded data slice. The method further includes determining the current slice integrity check value information compares favorably to the slice integrity check value information to produce a trusted rebuilt appended encoded data slice. When the current slice integrity check value information compares favorably to the slice integrity check value information, the method further includes storing the rebuilt appended encoded data slice as the trusted rebuilt appended encoded data slice.
1 . A method for execution by one or more computing devices of a storage network, the method comprises:
rebuilding an appended encoded data slice of a set of appended encoded data slices based on:
utilizing a decode threshold number of appended encoded data slices of a set of appended encoded data slices stored in a set of storage units of the storage network to produce a rebuilt encoded data slice for inclusion in the appended encoded data slice; and
generating current slice integrity check value information for inclusion in a rebuilt appended encoded data slice of the set of appended encoded data slices, wherein an appended encoded data slice of the set of appended encoded data slices includes an encoded data slice of a set of encoded data slices and slice integrity check value information for the encoded data slice;
determining the current slice integrity check value information compares favorably to the slice integrity check value information to produce a trusted rebuilt appended encoded data slice; and
when the current slice integrity check value information compares favorably to the slice integrity check value information, storing the rebuilt appended encoded data slice as the trusted rebuilt appended encoded data slice.
2 . The method of claim 1 , wherein the slice integrity check value information comprises:
an integrity check value list, wherein the integrity check value list includes a width number equal to a number of integrity check values of a set of integrity check values.
3 . The method of claim 2 , wherein each encoded data slice of the set of encoded data slices is hashed to produce the set of integrity check values.
4 . The method of claim 1 , wherein the slice integrity check value information comprises:
an integrity check value list hash, wherein an integrity check value list is hashed to produce the integrity check value list hash.
5 . The method of claim 4 , wherein the slice integrity check value information further comprises:
an encoded integrity check value list slice of a set of encoded integrity check value list slices, wherein the integrity check value list is error encoded to produce the set of encoded integrity check value list slices.
6 . The method of claim 1 , wherein the storing the rebuilt appended encoded data slice comprises:
sending the rebuilt appended encoded data slice that includes a rebuilt encoded data slice and the current slice integrity check value information to a storage unit of the set of storage units.
7 . The method of claim 1 , wherein the generating the current slice integrity check value information for the rebuilt appended encoded data slice further comprises:
determining whether the slice integrity check value information is an integrity check value list or an integrity check value list hash and an encoded integrity check value list slice.
8 . The method of claim 7 further comprises:
when the slice integrity check value information is the integrity check value list:
generating a current integrity check value list, wherein the current integrity check value list includes a width number equal to a number of current integrity check values of a set of current integrity check values, wherein each encoded data slice associated with a decode threshold number of appended encoded data slices of the set of appended encoded data slices and the rebuilt appended encoded data slice is hashed to produce a set of current integrity check values.
9 . The method of claim 7 further comprises:
when the slice integrity check value information is the integrity check value list hash and the encoded integrity check value list slice:
generating a current integrity check value list;
hashing the current integrity check value list to produce a current integrity check value list hash; and
dispersed error encoding the current integrity check value list to produce a set of current encoded integrity check value list slices.
10 . The method of claim 7 , wherein the determining whether the slice integrity check value information is the integrity check value list or the integrity check value list hash and the encoded integrity check value list slice comprises:
sending a slice integrity check value information inquiry to a processing unit of the storage network that generated the set of appended encoded data slices.
11 . The method of claim 7 , wherein the determining whether the slice integrity check value information is the integrity check value list or the integrity check value list hash and the encoded integrity check value list slice comprises:
performing a trusted source lookup.
12 . The method of claim 1 , wherein the determining the current slice integrity check value information corresponds to the slice integrity check value information comprises:
comparing the current slice integrity check value information to the slice integrity check value information.
13 . The method of claim 1 , wherein the determining the current slice integrity check value information corresponds to the slice integrity check value information comprises:
performing a deterministic function on the current slice integrity check value information.
14 . The method of claim 1 , wherein the rebuilding further comprises:
obtaining the decode threshold number of appended encoded data slices of the set of appended encoded data slices; and
rebuilding the appended encoded data slice based on the decode threshold number of appended encoded data slices.
15 . The method of claim 1 further comprises:
when the current slice integrity check value information does not compare favorably to the slice integrity check value information, indicating an authenticity failure of the rebuilding of the appended encoded data slice.
16 . A computer readable storage device comprises:
at least one memory section for storing operational instructions that, when executed by one or more computing devices of a storage network, cause the one or more computing devices to:
rebuild an appended encoded data slice of a set of appended encoded data slices based on:
utilizing a decode threshold number of appended encoded data slices of a set of appended encoded data slices stored in a set of storage units of the storage network to produce a rebuilt encoded data slice for inclusion in the appended encoded data slice; and
generating current slice integrity check value information for inclusion in a rebuilt appended encoded data slice of the set of appended encoded data slices, wherein an appended encoded data slice of the set of appended encoded data slices includes an encoded data slice of a set of encoded data slices and slice integrity check value information for the encoded data slice;
determine the current slice integrity check value information compares favorably to the slice integrity check value information to produce a trusted rebuilt appended encoded data slice; and
when the current slice integrity check value information compares favorably to the slice integrity check value information, store the rebuilt appended encoded data slice as the trusted rebuilt appended encoded data slice.
17 . The computer readable storage device of claim 16 , wherein the slice integrity check value information comprises:
an integrity check value list, wherein the integrity check value list includes a width number equal to a number of integrity check values of a set of integrity check values.
18 . The computer readable storage device of claim 17 , wherein each encoded data slice of the set of encoded data slices is hashed to produce the set of integrity check values.
19 . The computer readable storage device of claim 15 , wherein the slice integrity check value information comprises:
an integrity check value list hash, wherein an integrity check value list is hashed to produce the integrity check value list hash.