Return-Path: <linux-kernel-owner+willy=40w.ods.org@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
	id <S267050AbTAGM0G>; Tue, 7 Jan 2003 07:26:06 -0500
Received: (majordomo@vger.kernel.org) by vger.kernel.org
	id <S267125AbTAGM0G>; Tue, 7 Jan 2003 07:26:06 -0500
Received: from ns.indranet.co.nz ([210.54.239.210]:15813 "EHLO
	mail.acheron.indranet.co.nz") by vger.kernel.org with ESMTP
	id <S267050AbTAGM0G>; Tue, 7 Jan 2003 07:26:06 -0500
Date: Wed, 08 Jan 2003 01:31:36 +1300
From: Andrew McGregor <andrew@indranet.co.nz>
To: Alan Cox <alan@lxorguk.ukuu.org.uk>
cc: Roman Zippel <zippel@linux-m68k.org>,
       Andre Hedrick <andre@pyxtechnologies.com>,
       Oliver Xymoron <oxymoron@waste.org>, Andrew Morton <akpm@digeo.com>,
       Rik van Riel <riel@conectiva.com.br>,
       Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
Subject: Re: Linux iSCSI Initiator, OpenSource (fwd) (Re: Gauntlet Set NOW!)
Message-ID: <27130000.1041942696@localhost.localdomain>
In-Reply-To: <1041942677.20658.0.camel@irongate.swansea.linux.org.uk>
References: <Pine.LNX.4.10.10301051924140.421-100000@master.linux-ide.org>	
 <3E19B401.7A9E47D5@linux-m68k.org>	
 <17360000.1041899978@localhost.localdomain>
 <1041942677.20658.0.camel@irongate.swansea.linux.org.uk>
X-Mailer: Mulberry/3.0.0b10 (Linux/x86)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Sender: linux-kernel-owner@vger.kernel.org
X-Mailing-List: linux-kernel@vger.kernel.org
Content-Length: 1263
Lines: 34

Or ESP, with or without encryption as well.

But that does not acheive quite the same thing, because the iSCSI digest is 
another lightweight checksum, albeit stronger than most, and does not 
provide authentication.  So AH or ESP is stronger, but slower.

Maybe Cisco are assuming another layer deals with the errors.  However, to 
get an interoperable and efficient implementation requires the capability 
to do whatever combination is required, along with sensible defaults.

Andrew

--On Tuesday, January 07, 2003 12:31:18 +0000 Alan Cox 
<alan@lxorguk.ukuu.org.uk> wrote:

> On Tue, 2003-01-07 at 00:39, Andrew McGregor wrote:
>> optional stronger TCP digest for IPv6, and if used with that then there
>> is  no need for the iSCSI digest.  Otherwise, well, play dice with the
>> data.  Loaded in your favour, but still dice.
>
> There is no need for the iSCSI digest anyway. You can use IP-AH to
> achieve  precisely the same thing, and strong guarantees already in a
> standards  compliant manner.
>
> Alan
>
>


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/