<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Hi,<br>
<br>
</div>
<blockquote
cite="mid:6C553BB0-1013-46A6-9B11-5524E2D585DB@freeradius.org"
type="cite">Support for SHA-224 SHA-256-SHA-384 and SHA-512 hashes
has been added to rlm_pap. The correct digest algo is determined
by the length of the value of SHA2-Password.<br>
<font color="#0f61c8"><br>
</font>28 bytes - SHA-224<br>
32 bytes - SHA-256<br>
48 bytes - SHA-384<br>
64 bytes - SHA-512<br>
</blockquote>
<br>
Wow, good news indeed!<br>
<br>
So, all those different lengths are so to speak "multiplexed" into
one single "SHA2-Password" attribute? Also, what is the encoding?
base64?<br>
<br>
A kinda logical next step would be to allow salted SHA2-x. The
multiplexing wouldn't work there though due to unpredictable salt
length...<br>
<br>
Stefan<br>
<br>
<blockquote
cite="mid:6C553BB0-1013-46A6-9B11-5524E2D585DB@freeradius.org"
type="cite"><font color="#0f61c8"><br>
</font>Password-With-Header prefixes {sha2},{sha256},{sha512} will
all result in the Password-With-Header value being copied to a
SHA2-Password attribute. {sha256},{sha512} match the password
headers used by the slapd-sha2 module developed for OpenLDAP.<br>
<font color="#0f61c8"><br>
</font>Don't think many of the other hashes in OpenSSL's EVP_MD
API are either widely used or appropriate for hashing passwords.
But if someone knows differently then let me know.<br>
<font color="#0f61c8"><br>
</font>The equivalent xlats have also been added for SHA-256 and
SHA-512, I don't think SHA-224 or SHA-384 are widely used enough
to justify adding them, but it's only a two line patch if someone
thinks differently.<br>
<font color="#0f61c8"><br>
</font>Does anyone have a burning need for any of the other hashes
supported by EVP_MD?<br>
<font color="#0f61c8"><br>
</font>-Arran<br>
<br>
<div apple-content-edited="true">
<div style="color: rgb(0, 0, 0); font-family: Consolas;
font-style: normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: normal; orphans: 2;
text-align: -webkit-auto; text-indent: 0px; text-transform:
none; white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; word-wrap: break-word;
-webkit-nbsp-mode: space; -webkit-line-break:
after-white-space;">
<div style="color: rgb(0, 0, 0); font-family: Consolas;
font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: normal;
orphans: 2; text-align: -webkit-auto; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
word-wrap: break-word; -webkit-nbsp-mode: space;
-webkit-line-break: after-white-space;">
<div style="color: rgb(0, 0, 0); font-family: Consolas;
font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: normal;
orphans: 2; text-align: -webkit-auto; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
word-wrap: break-word; -webkit-nbsp-mode: space;
-webkit-line-break: after-white-space;">Arran
Cudbard-Bell <<a moz-do-not-send="true"
href="mailto:a.cudbardb@freeradius.org">a.cudbardb@freeradius.org</a>><br>
FreeRADIUS Development Team<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas;
font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: normal;
orphans: 2; text-align: -webkit-auto; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
word-wrap: break-word; -webkit-nbsp-mode: space;
-webkit-line-break: after-white-space;"><br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Consolas;
font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: normal;
orphans: 2; text-align: -webkit-auto; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
word-wrap: break-word; -webkit-nbsp-mode: space;
-webkit-line-break: after-white-space;">FD31 3077 42EC
7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2</div>
</div>
</div>
</div>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/devel.html">http://www.freeradius.org/list/devel.html</a></pre>
</blockquote>
<br>
</body>
</html>