2.x.x (and earier?): yet another decoding SSHA issue

Stefan Winter stefan.winter at restena.lu
Mon Jul 22 11:43:47 CEST 2013


Hi,

>         expand: %{control:RESTENA-SSHA1-Password} -> oPQYKSRg5w8XWEiJCcNtzKRhUhtJMUQ/WjdCWlVQS2JWN2Qz
>         expand: 0x%{base64tohex: %{control:RESTENA-SSHA1-Password}} -> 0xffff18292460ff0f175848ff09ff6dffff61521b4931443f5a37425a55504b6256376433

when I take this base64 and use an online base64-decode service such as
http://base64decode.net/ and use its output with an online hex-encoder
such as http://convertstring.com/EncodeDecode/HexEncode I end up with
the string

203F182924603F0F1758483F093F6D3F3F61521B4931443F5A37425A55504B6256376433

The bit-diff to what the FreeRADIUS fucntion produces is like:

203F182924603F0F1758483F093F6D3F3F61521B4931443F5A37425A55504B6256376433
ffff18292460ff0f175848ff09ff6dffff61521b4931443f5a37425a55504b6256376433
***---------*---------*---*---*-*---------------------------------------

(I was wondering from the start why there are many more FF's in the
FreeRADIUS version than what probability would suggest)

Stefan

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 263 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20130722/47e76614/attachment.pgp>


More information about the Freeradius-Devel mailing list