[storm] Protocol Action: 'Securing Block Storage Protocols over IP: RFC 3723 Requirements Update for IPsec v3' to Proposed Standard (draft-ietf-storm-ipsec-ips-update-04.txt)

The IESG <iesg-secretary@ietf.org> Wed, 27 November 2013 13:50 UTC

Return-Path: <iesg-secretary@ietf.org>
X-Original-To: storm@ietfa.amsl.com
Delivered-To: storm@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B6821ADEA3; Wed, 27 Nov 2013 05:50:40 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Al1AEMW5vBja; Wed, 27 Nov 2013 05:50:38 -0800 (PST)
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 68B791AE006; Wed, 27 Nov 2013 05:50:24 -0800 (PST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 4.83.p1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <20131127135024.17409.74274.idtracker@ietfa.amsl.com>
Date: Wed, 27 Nov 2013 05:50:24 -0800
Cc: storm mailing list <storm@ietf.org>, storm chair <storm-chairs@tools.ietf.org>, RFC Editor <rfc-editor@rfc-editor.org>
Subject: [storm] Protocol Action: 'Securing Block Storage Protocols over IP: RFC 3723 Requirements Update for IPsec v3' to Proposed Standard (draft-ietf-storm-ipsec-ips-update-04.txt)
X-BeenThere: storm@ietf.org
X-Mailman-Version: 2.1.15
List-Id: Storage Maintenance WG <storm.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/storm>, <mailto:storm-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/storm/>
List-Post: <mailto:storm@ietf.org>
List-Help: <mailto:storm-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/storm>, <mailto:storm-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Nov 2013 13:50:41 -0000

The IESG has approved the following document:
- 'Securing Block Storage Protocols over IP: RFC 3723 Requirements Update
   for IPsec v3'
  (draft-ietf-storm-ipsec-ips-update-04.txt) as Proposed Standard

This document is the product of the STORage Maintenance Working Group.

The IESG contact persons are Martin Stiemerling and Spencer Dawkins.

A URL of this Internet Draft is:
http://datatracker.ietf.org/doc/draft-ietf-storm-ipsec-ips-update/




Technical Summary

   RFC 3723 specifies IPsec requirements for block storage protocols
   over IP (e.g., iSCSI) based on IPsec v2 (RFC 2401 and related RFCs);
   those requirements have subsequently been applied to remote direct
   data placement protocols, e.g., RDMAP.  This document updates RFC
   3723's IPsec requirements to IPsec v3 (RFC 4301 and related RFCs) and
   makes some changes to required algorithms based on developments in
   cryptography since RFC 3723 was published.

Working Group Summary

   This document updates the IPsec requirements in RFC 3723 and all RFCs
   to which those requirements apply.  The iSCSI maintenance work in
   the storm WG had originally intended to only update the IPsec
   requirements for iSCSI.  Two developments changed this approach:

   o Cryptographic developments upended RFC 3723's requirement for 3DES
     as the mandatory to implement encryption transform.  The protocols
     to which RFC 3723 applies can approach 3DES's birthday bound and
     need to rekey in less than a minute on high-speed links.

   o iSER (iSCSI extensions for RDMA) uses RFC 3723 IPsec requirements
     twice, once for iSCSI and once for the underlying rddp (iWARP)
     RDMA protocol.  An RFC 3723 update is needed for the latter in
     order to avoid inconsistent IPsec requirements in the same protocol
     stack.

   David McGrew and Steve Kent (respectively) deserve credit for surfacing
   the above two concerns that lead to creation of this document.  This
   document has not been controversial in the storm WG.


Document Quality

   This document specifies a profile of widely implemented protocols,
   IPsec v2 and v3.  The specified cryptographic transforms have been
   selected as ones that are commonly available in IPsec implementations.

   Sean Turner (SEC AD) and Paul Hoffman (ipsecme WG chair) were both
   notably helpful in providing advice on transform selection.  Yaron
   Sheffer (ipsecme WG chair) provided a thorough review that significantly
   improved the quality of this document.  Tom Talpey (storm WG chair)
   provided a thorough WG Last Call review.

   The document shepherd is very pleased with the help received from
   both ipsecme WG co-chairs and the AD responsible for the ipsecme WG.

Personnel

   Document Shepherd: David Black (storm WG co-chair, david.black@emc.com)
   Responsible Area Director: Martin Stiemerling (Transport, martin.stiemerling@neclab.eu)