Hi,
This mail is regarding usage of algorithms SHA1, SHA2 and SHA3 with
iSCSI for CHAP authentication.
RFC 1994 mentions support for only the MD5 algorithm, I have copied
the RFC excerpt below.
"The Algorithm field is one octet and indicates the authentication
method to be used.
Up-to-date values are specified in the most recent "Assigned Numbers" [2].
One value is required to be implemented: 5 CHAP with MD5 [3]"
Clearly the RFC does not mention other values that map to SHA1, SHA2 and SHA3.
But I see open-iscsi and scst-iscsi implementations have used values
6, 7, 8 for these algorithms.
open-iscsi : auth.c
AUTH_CHAP_ALG_MD5 = 5,
AUTH_CHAP_ALG_SHA1 = 6,
AUTH_CHAP_ALG_SHA256 = 7,
AUTH_CHAP_ALG_SHA3_256 = 8,
iscsi-scst : chap.c
#define CHAP_DIGEST_ALG_MD5 5
#define CHAP_DIGEST_ALG_SHA1 6
#define CHAP_DIGEST_ALG_SHA256 7
#define CHAP_DIGEST_ALG_SHA3_256 8
Can someone please share details on how open-iscsi and iscsi-scst
implementations decided to use these numbers?
Is this covered in any specification/RFC, how would targets or other
OSes know the value to be used?
Please share any document references.
Thanks,
Nitish
--
You received this message because you are subscribed to the Google Groups
"open-iscsi" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion visit
https://groups.google.com/d/msgid/open-iscsi/CAGEDioPc0UQMtrXr4fLQbedDT4cja5WPcLV-cU6Nn-C34TNHsw%40mail.gmail.com.