Fwd: Accessing the "Authenticator" value from within a perl script

[Lannar Dean]

When using the perl module to process access-requests, is it possible to
get the "Authenticator" value (NOT the Message-Authenticator)?

There is a VSA which contains encoded data, which is using the encoding
mechanism specified in RFC2865, which requires the Authenticator to
decrypt. It does not decode properly when the dictionary specifies RFC2865
(encrypt=1) or RFC2868 (encrypt=2), because the encrypted data is sometimes
larger than 192 bytes which is not supported in the Password attribute.

For example, I need access to the following value, visible in a packet
capture, from within my perl script: Authenticator value
<https://i.stack.imgur.com/p6LTq.png> (not the Message-Authenticator AVP
<https://i.stack.imgur.com/dB4q4.png>)

The text to be decrypted is present in a VSA that is defined in a
dictionary, such as

ATTRIBUTE    MyVendors-Special-Passphrase     44 string encrypt=1

(also tried encrypt=2)

An example of the payload of the value is

21caa32fea486d9baf414610ea46510e9706a476812d02e21b956e35aa47501040b445702c6ff7e1f7f839480c1a26458f710af77aeae6e592b6e6910a6d93bbf31fe803d05799bcdec86b6b5c70c85fd92ad63449773ec1500069688280cfce0da532e0ece9e504fffef1cd381b69b981ac1b17a4a5ea672154dbea8d61823bb0644669f5f367b28fe6431d8a11d109ec4a8d19e6be46eca4c8085cd01c1b02fd0fc0bff7719432d8445b2cf39a0e66


I would like to decrypt the data manually inside a perl module, but in
order to do that I need the Authenticator value to use as a vector to the
decryption algorithm, which I haven't been able to access from my perl
script.

Since neither encrypt=1 nor encrypt=2 results in the correct data, I would
like to do the decryption myself within perl.   If I obtain the
Authenticator value manually from a packet capture, I am able to complete
the process, but I would like to automate this.

Does anyone know of a way to get that value?


Thank you in advance!