FIPS feature
Alan DeKok
aland at deployingradius.com
Tue Apr 28 21:07:09 CEST 2009
A.L.M.Buxey at lboro.ac.uk wrote:
> Hi,
>
>>> 2) AES Key Wrap of the MSK in the Access-Accept (attribute format
>>> is vendor specific - but feature could be mostly generic).
>> That won't be supported by most NASes, but OK.
>
> if this is what Cisco mean by AES key wrap then we can validate/verify
> the updated featureset as the cisco wireless solution (WISM) has
> an option for AES keywrap when talking to the RADIUS server configured
OK. The keywrap document hasn't been standardized, but it might be
within 3-4 years...
Alan DeKok.
More information about the Freeradius-Devel
mailing list