When using the perl module to process access-requests, is it possible to get the "Authenticator" value (NOT the Message-Authenticator)? There is a VSA which contains encoded data, which is using the encoding mechanism specified in RFC2865, which requires the Authenticator to decrypt. It does not decode properly when the dictionary specifies RFC2865 (encrypt=1) or RFC2868 (encrypt=2), because the encrypted data is sometimes larger than 192 bytes which is not supported in the Password attribute. For example, I need access to the following value, visible in a packet capture, from within my perl script: Authenticator value <https://i.stack.imgur.com/p6LTq.png> (not the Message-Authenticator AVP <https://i.stack.imgur.com/dB4q4.png>) The text to be decrypted is present in a VSA that is defined in a dictionary, such as ATTRIBUTE MyVendors-Special-Passphrase 44 string encrypt=1 (also tried encrypt=2) An example of the payload of the value is 21caa32fea486d9baf414610ea46510e9706a476812d02e21b956e35aa47501040b445702c6ff7e1f7f839480c1a26458f710af77aeae6e592b6e6910a6d93bbf31fe803d05799bcdec86b6b5c70c85fd92ad63449773ec1500069688280cfce0da532e0ece9e504fffef1cd381b69b981ac1b17a4a5ea672154dbea8d61823bb0644669f5f367b28fe6431d8a11d109ec4a8d19e6be46eca4c8085cd01c1b02fd0fc0bff7719432d8445b2cf39a0e66 I would like to decrypt the data manually inside a perl module, but in order to do that I need the Authenticator value to use as a vector to the decryption algorithm, which I haven't been able to access from my perl script. Since neither encrypt=1 nor encrypt=2 results in the correct data, I would like to do the decryption myself within perl. If I obtain the Authenticator value manually from a packet capture, I am able to complete the process, but I would like to automate this. Does anyone know of a way to get that value? Thank you in advance!