FIPS feature

William Rettig WRettig at
Tue Apr 28 16:35:17 CEST 2009

Good morning.


My boss has asked me to add a FIPS feature to FreeRADIUS.


It really doesn't amount to much at this point.  We think that FIPS mode
requires additional two things:


1)       Use of HMAC-SHA1 MAC (vendor neutral)

2)       AES Key Wrap of the MSK in the Access-Accept (attribute format
is vendor specific - but feature could be mostly generic).


Is this something that could be supported moving forward?


Would someone be willing to direct my efforts?




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the Freeradius-Devel mailing list