Re: Linux iSCSI Initiator, OpenSource (fwd) (Re: Gauntlet Set NOW!)

[Andrew McGregor <andrew@indranet.co.nz>]

Or ESP, with or without encryption as well.

But that does not acheive quite the same thing, because the iSCSI digest is 
another lightweight checksum, albeit stronger than most, and does not 
provide authentication.  So AH or ESP is stronger, but slower.

Maybe Cisco are assuming another layer deals with the errors.  However, to 
get an interoperable and efficient implementation requires the capability 
to do whatever combination is required, along with sensible defaults.

Andrew

--On Tuesday, January 07, 2003 12:31:18 +0000 Alan Cox 
<alan@lxorguk.ukuu.org.uk> wrote:

> On Tue, 2003-01-07 at 00:39, Andrew McGregor wrote:
>> optional stronger TCP digest for IPv6, and if used with that then there
>> is  no need for the iSCSI digest.  Otherwise, well, play dice with the
>> data.  Loaded in your favour, but still dice.
>
> There is no need for the iSCSI digest anyway. You can use IP-AH to
> achieve  precisely the same thing, and strong guarantees already in a
> standards  compliant manner.
>
> Alan
>
>