Securing Block Storage Protocols over IP

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 70
Abstract: This document discusses how to secure block storage and storage discovery protocols running over IP (Internet Protocol) using IPsec and IKE (Internet Key Exchange). Threat models and security protocols are developed for iSCSI (Internet Protocol Small Computer System Interface), iFCP (Internet Fibre Channel Storage Networking) and FCIP (Fibre Channel over TCP/IP), as well as the iSNS (Internet Storage Name Server) and SLPv2 (Service Location Protocol v2) discovery protocols. Performance issues and resource constraints are analyzed. [STANDARDS-TRACK]
Publication Date: 2004-04-01
Status Note: Proposed Standard
DOI: 10.17487/RFC3723
Link: https://doi.org/10.17487/RFC3723
Author(s): Dr. Bernard D. Aboba
Josh Tseng
Jesse R. Walker
Venkat D. Rangan
Franco Travostino
Keyword(s): Internet, Threat Model, Security

Latest version of IETF RFC 3723

Document Versions — IETF RFC 3723

▶ IETF RFC 3723 (2004-04-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

IETF RFC 7146 [Active*]

Normative Reference(s)

ANSI.X9.52.1998 — 3DES American National Standards Institute. ANSI X9.52-1998, Triple Data Encryption Algorithm Modes of Operation. 1998. EXTERNAL
IETF RFC 793 [Superseded*]
IETF RFC 1191 [Active*]
IETF RFC 1435 [Active*]
IETF RFC 1981 [Superseded*]
IETF RFC 2104 [Active, Amended*]
IETF RFC 2119 [Active*]
IETF RFC 2131 [Active*]
IETF RFC 2401 [Superseded*]
IETF RFC 2404 [Active*]
IETF RFC 2406 [Superseded*]
IETF RFC 2407 [Superseded*]
IETF RFC 2408 [Superseded*]
IETF RFC 2409 [Superseded*]
IETF RFC 2412 [Active*]
IETF RFC 2434 [Superseded*]
IETF RFC 2451 [Active*]
IETF RFC 2608 [Active*]
IETF RFC 2923 [Active*]
IETF RFC 2945 [Active*]
IETF RFC 3315 [Superseded*]
IETF RFC 3456 [Active*]
IETF RFC 3526 [Active*]
IETF RFC 3566 [Active*]
IETF RFC 3643 [Active*]
IETF RFC 3686 [Active*]
IETF RFC 3720 [Superseded*]
SSCID.14281976 — 26 EXTERNAL

Bibliographic Reference(s)

IETF.draft-krovetz-umac-01 — UMACKR EXTERNAL
NIST FIPS 46-3 [Withdrawn]
NIST.FIPS.74 — 9 EXTERNAL
NIST FIPS 197 [Superseded]
NIST SP 800-38A [Active, Amended]
Huttunen, A., et. al., "UDP Encapsulation of IPsec Packets", Work in Progress, June 2002. EXTERNAL
A. Bosselaers, "Performance of Pentium implementations", http://www.esat.kuleuven.ac.be/~bosselae/ EXTERNAL
Bakke, M., "Finding iSCSI targets and Name Servers Using SLP", Work in Progress, March 2002. EXTERNAL
Kent, S., "IP Encapsulating Security Payload (ESP)" , Work in Progress, July 2002. EXTERNAL
Bakke, M., et al., "Definitions of Managed Objects for iSCSI", Work in Progress, September 2002. EXTERNAL
Cracking DES, O'Reilly & Associates, Sebastapol, CA 2000. EXTERNAL
Black, J., Halevi, S., Krawczyk, H., Krovetz, T., Rogaway, P., "UMAC: Fast and provably secure message authentication", Advances in Cryptology - CRYPTO '99, LNCS vol. 1666, pp. 216-233. Full version available from http://www.cs.ucdavis.edu/~rogaway/umac EXTERNAL
Rogaway, P., Black, J., "PMAC: Proposal to NIST for a parallelizable message authentication code", http://csrc.nist.gov/encryption/modes/proposedmodes/ pmac/pmac-spec.pdf EXTERNAL
Schneier, B., J. Kelsey, D. Whiting, D. Wagner, C. Hall, and N. Ferguson, "Performance Comparison of the AES Submissions", http://www.counterpane.com/aes- performance.html EXTERNAL
Bellare, Desai, Jokippi, Rogaway, "A Concrete Treatment of Symmetric Encryption: Analysis of the DES Modes of Operation", 1997, http://www- cse.ucsd.edu/users/mihir/papers/sym-enc.html EXTERNAL
Stone J., Partridge, C., "When the CRC and TCP checksum disagree", ACM Sigcomm, Sept. 2000. EXTERNAL
Kivinen, T., et al., "Negotiation of NAT-Traversal in the IKE", Work in Progress, June 2002. EXTERNAL
Bellovin, S., "An Issue With DES-CBC When Used Without Strong Integrity", Proceedings of the 32nd IETF, Danvers, MA, April 1995 EXTERNAL
Wu, T., "SRP Distribution", http://www-cs- students.stanford.edu/~tjw/srp/download.html EXTERNAL
Orman, H., Hoffman, P., "Determining Strengths For Public Keys Used For Exchanging Symmetric Keys", Work in Progress, December 2001. EXTERNAL
Monia, C., et al., "iFCP - A Protocol for Internet Fibre Channel Storage Networking", Work in Progress, August 2002. EXTERNAL
Rogaway, P., "UMAC Performance", http://www.cs.ucdavis.edu/~rogaway/umac/perf00.html EXTERNAL
Biham, E., Shamir, A., "Differential Cryptanalysis of DES-like cryptosystems", Journal of Cryptology Vol 4, Jan 1991. EXTERNAL
Gibbons, K., et al., "iSNS Internet Storage Name Service", Work in Progress, August 2002. EXTERNAL
Petersen, D., "Finding FCIP Entities Using SLPv2" , Work in Progress, September 2002. EXTERNAL
Rajagopal, M., et al., "Fibre Channel over TCP/IP (FCIP)", Work in Progress, August 2002. EXTERNAL
IETF RFC 1321 [Active*]
IETF RFC 1994 [Active*]
IETF RFC 2230 [Active*]
IETF RFC 2373 [Superseded*]
IETF RFC 2402 [Superseded*]
IETF RFC 2403 [Active*]
IETF RFC 2405 [Active*]
IETF RFC 2535 [Superseded*]
IETF RFC 2782 [Active*]
IETF RFC 2845 [Superseded*]
IETF RFC 2865 [Active*]
IETF RFC 2931 [Active*]
IETF RFC 2983 [Active*]
IETF RFC 3007 [Active*]
RFC3347 — RFC3347 EXTERNAL
IETF RFC 3715 [Active*]
RFC3721 — RFC3721 EXTERNAL
RSA.crypto.v2n2.1996 — Dobb EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC3723.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 3723, Securing Block Storage Protocols over IP. Available at https://doi.org/10.17487/RFC3723

Snippet:

IETF RFC 3723, Securing Block Storage Protocols over IP. Available at https://doi.org/10.17487/RFC3723

HTML (ISO 690 compliant)

Preview:

IETF RFC 3723, Securing Block Storage Protocols over IP. Available at https://doi.org/10.17487/RFC3723

Snippet:

<span class="citation"><cite>IETF RFC 3723</cite>, Securing Block Storage Protocols over IP. Available at <a href="https://doi.org/10.17487/RFC3723" target="_blank" rel="noopener">https://doi.org/10.17487/RFC3723</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 3723, Securing Block Storage Protocols over IP
doi: 10.17487/RFC3723
url: https://doi.org/10.17487/RFC3723

Snippet:

<li>
<cite id="bib-rfc3723">IETF RFC 3723</cite>, Securing Block Storage Protocols over IP
<span class="doi">10.17487/RFC3723</span>
</li>

Referenced By

IETF RFC 3720 [Superseded*]
IETF RFC 3821 [Active*]
IETF RFC 3822 [Active*]
IETF RFC 4018 [Active*]
IETF RFC 4172 [Active*]
IETF RFC 4173 [Active*]
IETF RFC 4174 [Active*]
IETF RFC 7146 [Active*]