FIPS feature

[William Rettig]

Good morning.

 

My boss has asked me to add a FIPS feature to FreeRADIUS.

 

It really doesn't amount to much at this point.  We think that FIPS mode
requires additional two things:

 

1)       Use of HMAC-SHA1 MAC (vendor neutral)

2)       AES Key Wrap of the MSK in the Access-Accept (attribute format
is vendor specific - but feature could be mostly generic).

 

Is this something that could be supported moving forward?

 

Would someone be willing to direct my efforts?

 

Bill

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20090428/3d953b25/attachment.html>