TinyRadius icon indicating copy to clipboard operation
TinyRadius copied to clipboard
verified publisher icon ctran

Fixed PAP password encryption

Open darrenstarr opened this issue 8 years ago • 1 comments

The PAP password encryption wasn't RFC2865 compliant.

The RFC says : b1 = MD5(S + RA) c(1) = p1 xor b1 b2 = MD5(S + c(1)) c(2) = p2 xor b2

What was implemented looked nothing like that.

darrenstarr avatar Jan 19 '18 06:01 darrenstarr

@darrenstarr Can you provide a unit test for that fix? I've glanced at RFC 2865 but couldn't find any test vectors for that encryption algorithm.

edysli avatar Oct 28 '19 07:10 edysli