Question

I am wondering if there is a FIPS compliant solution for authenticating with a RADIUS server via .NET , such as http://code.google.com/p/radius-net/source/browse/trunk/radius-net/src/?r=4

The problem with the linked one that makes it not compliant with FIPS is the use of MD5, which is not a secure algorithm according to this standard.

Was it helpful?

Solution

MD5 makes the whole RADIUS protocol non-compliant, not just one particular client.

See Does RADIUS’s use of the MD5 algorithm make it not FIPS validated for an application that allows RADIUS authentication?

There is no such thing as a FIPS-compliant implementation of an algorithm that isn't FIPS-compliant.

And you've been told this before: Override MD5 to make it FIPS validated?

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top