Good morning.

My boss has asked me to add a FIPS feature to FreeRADIUS.

It really doesn’t amount to much at this point.  We think that FIPS mode requires additional two things:

1) Use of HMAC-SHA1 MAC (vendor neutral)

2) AES Key Wrap of the MSK in the Access-Accept (attribute format is vendor specific - but feature could be mostly generic).

Is this something that could be supported moving forward?

Would someone be willing to direct my efforts?

Bill