문제

I am wondering if there is a FIPS compliant solution for authenticating with a RADIUS server via .NET , such as http://code.google.com/p/radius-net/source/browse/trunk/radius-net/src/?r=4

The problem with the linked one that makes it not compliant with FIPS is the use of MD5, which is not a secure algorithm according to this standard.

도움이 되었습니까?

해결책

MD5 makes the whole RADIUS protocol non-compliant, not just one particular client.

See Does RADIUS’s use of the MD5 algorithm make it not FIPS validated for an application that allows RADIUS authentication?

There is no such thing as a FIPS-compliant implementation of an algorithm that isn't FIPS-compliant.

And you've been told this before: Override MD5 to make it FIPS validated?

라이센스 : CC-BY-SA ~와 함께 속성
제휴하지 않습니다 StackOverflow
scroll top