RE: CHAP secret lengths

[wrstuden@wasabisystems.com]

On Thu, 13 Mar 2003, Dean Scoville wrote:

> Bill,
> True, the padding can be done independent of the iSCSI protocol,
> if such padding is needed then both the initiator and the target
> must use the same algorithm to pad.

No, my thought is that if you're padding, then just do the pad. You'll now
have an even-octed secret. Configure the initiator and target with that
padded secret, and you're done. :-)

If we really were supporting non-octet secrets, there would be no need for
padding.

> Thanks for the info about the crypto libraries all being
> octet-oriented.

NP.

> I think what I am hearing is there is no need to support non-octet
> secrets.

While I haven't seen it written anywhere, I think everyone would be
surprised at non-octet secrets.

Take care,

Bill