FIPS feature

Alan DeKok aland at
Tue Apr 28 21:07:09 CEST 2009

A.L.M.Buxey at wrote:
> Hi,
>>> 2)       AES Key Wrap of the MSK in the Access-Accept (attribute format
>>> is vendor specific - but feature could be mostly generic).
>>   That won't be supported by most NASes, but OK.
> if this is what Cisco mean by AES key wrap then we can validate/verify
> the updated featureset as the cisco wireless solution (WISM) has
> an option for AES keywrap when talking to the RADIUS server configured

  OK.  The keywrap document hasn't been standardized, but it might be
within 3-4 years...

  Alan DeKok.

More information about the Freeradius-Devel mailing list