28 Apr
2009
28 Apr
'09
10:35 a.m.
Good morning. My boss has asked me to add a FIPS feature to FreeRADIUS. It really doesn't amount to much at this point. We think that FIPS mode requires additional two things: 1) Use of HMAC-SHA1 MAC (vendor neutral) 2) AES Key Wrap of the MSK in the Access-Accept (attribute format is vendor specific - but feature could be mostly generic). Is this something that could be supported moving forward? Would someone be willing to direct my efforts? Bill