SORT BY:

LIST ORDER
THREAD
AUTHOR
SUBJECT


SEARCH

IPS HOME


    [Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

    CHAP secret lengths



    Julian,
    
    The MD5 algorithm (RFC 1321) can encode messages that are
    comprised of an arbitrary number of bits, and as such the 
    message length need not be a multiple of 8-bits.
    
    The CHAP RFC (RFC 1994) describes the CHAP Response 
    value as being a one-way hash calculated over a stream of octets,
    consisting of the Identifier, followed by (concatenated with) the 
    "secret",  followed by (concatenated with) the Challenge Value.
    
    This would lead me to believe that the CHAP secret must be an
    integral number of octets, even though the MD5 algorithm is
    capable of encoding messages that are not a multiple of 8-bits
    and even though the iSCSI draft uses units of "bits" (96 random
    bits, 128 bit random secrets, etc.) when referring to acceptable
    CHAP secret lengths.
    
    Can we assume that CHAP secrets will always be a multiple of 8-bits?
    If not, do we need to pad the secret to a multiple of 8-bits (using
    0's as pad bits, perhaps?) before concatenating it with the Identifier
    and Challenge values and running the result through the MD5 algorithm?
    
    thanks,
    Dean Scoville
    
    
    


Home

Last updated: Thu Mar 13 20:19:20 2003
12425 messages in chronological order