RE: Crypto-agility work item

["Nelson, David" <dnelson@enterasys.com>]

> The existing RADIUS security mechanisms include:
> 
> -- The MD5-based stream cipher used to obscure the User-Password
> attribute.
> 
> -- The MD5-based MAC used to create the Response-Authenticator header
> field.
> 
> -- The HMAC-MD5 MAC used to create the Message-Authenticator
attribute.

I neglected to mention:

-- The MD5 based stream cipher used to obscure MS-MPPE-Send-Key and
MS-MPPE-Recv-Key attributes.

-- The MD5 based stream cipher used to obscure the Tunnel-Password
attribute.

Are there others I've overlooked?


--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>