RFC 8146 support in FreeRADIUS

[Arran Cudbard-Bell]

> On Oct 4, 2019, at 6:24 PM, Jouni Malinen <jkmalinen at gmail.com> wrote:
> 
> On Fri, Oct 4, 2019 at 11:34 PM Arran Cudbard-Bell <
> a.cudbardb at freeradius.org> wrote:
> 
>>> On Oct 4, 2019, at 7:08 AM, Alberto Martínez Setién via Freeradius-Users
>> <freeradius-users at lists.freeradius.org> wrote:
>>>> I found RFC 8146, which defines new password preprocessing techniques,
>> that
>>>> would make EAP-PWD usable without having to store the password in
>> cleartext
>>>> or symmetric-encrypted.
>> 
>> Or if you can confirm this is supported already in wpa_supplicant, then
>> we'd be much more likely to add support.
>> 
> 
> wpa_supplicant supports three of the new password preprocessing techniques
> from RFC 8146 (0x03, 0x04, 0x05, i.e., a random salt with SHA-1/256/512).

Thanks for confirming.

-Arran
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20191007/69a6165d/attachment-0001.sig>