RFC 8146 support in FreeRADIUS

[Jouni Malinen]

On Fri, Oct 4, 2019 at 11:34 PM Arran Cudbard-Bell <
a.cudbardb at freeradius.org> wrote:

> > On Oct 4, 2019, at 7:08 AM, Alberto Martínez Setién via Freeradius-Users
> <freeradius-users at lists.freeradius.org> wrote:
> >> I found RFC 8146, which defines new password preprocessing techniques,
> that
> >> would make EAP-PWD usable without having to store the password in
> cleartext
> >> or symmetric-encrypted.
>
> Or if you can confirm this is supported already in wpa_supplicant, then
> we'd be much more likely to add support.
>

wpa_supplicant supports three of the new password preprocessing techniques
from RFC 8146 (0x03, 0x04, 0x05, i.e., a random salt with SHA-1/256/512).

- Jouni