sha128 or sha256 support?

Alan DeKok aland at deployingradius.com
Wed May 26 23:25:10 CEST 2021


On May 26, 2021, at 3:03 PM, Honglak Kim via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
>  Does FreeRadius support sha128 or sha256 for the user encrypted password?

  Yes.  The PAP module supports a wide range of encrypted passwords.

> We are using the internet to communicate between the radius server and network devices.Therefore more strong encrypted password method seems necessary.

  That is not how RADIUS works.

  The passwords between the NAS and the RADIUS server are already encrypted with the RADIUS shared secret.  The RADIUS server gets a clear-text password in the User-Password attribute.

  How the passwords are stored in the DB (SHA or whatever) is entirely unrelated.

  Alan DeKok.





More information about the Freeradius-Users mailing list