Hi,

This mail is regarding usage of algorithms SHA1, SHA2 and SHA3 with
iSCSI for CHAP authentication.
RFC 1994 mentions support for only the MD5 algorithm, I have copied
the RFC excerpt below.

"The Algorithm field is one octet and indicates the authentication
method to be used.
Up-to-date values are specified in the most recent "Assigned Numbers" [2].
One value is required to be implemented: 5 CHAP with MD5 [3]"

Clearly the RFC does not mention other values that map to SHA1, SHA2 and SHA3.
But I see open-iscsi and scst-iscsi implementations have used values
6, 7, 8 for these algorithms.

open-iscsi : auth.c
        AUTH_CHAP_ALG_MD5 = 5,
        AUTH_CHAP_ALG_SHA1 = 6,
        AUTH_CHAP_ALG_SHA256 = 7,
        AUTH_CHAP_ALG_SHA3_256 = 8,

iscsi-scst : chap.c
#define CHAP_DIGEST_ALG_MD5   5
#define CHAP_DIGEST_ALG_SHA1  6
#define CHAP_DIGEST_ALG_SHA256  7
#define CHAP_DIGEST_ALG_SHA3_256  8

Can someone please share details on how open-iscsi and iscsi-scst
implementations decided to use these numbers?
Is this covered in any specification/RFC, how would targets or other
OSes know the value to be used?
Please share any document references.

Thanks,
Nitish

-- 
You received this message because you are subscribed to the Google Groups 
"open-iscsi" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/d/msgid/open-iscsi/CAGEDioPc0UQMtrXr4fLQbedDT4cja5WPcLV-cU6Nn-C34TNHsw%40mail.gmail.com.

Reply via email to