Skip to content

Fixed PAP password encryption#14

Open
darrenstarr wants to merge 1 commit intoctran:masterfrom
darrenstarr:master
Open

Fixed PAP password encryption#14
darrenstarr wants to merge 1 commit intoctran:masterfrom
darrenstarr:master

Conversation

@darrenstarr
Copy link

The PAP password encryption wasn't RFC2865 compliant.

The RFC says :
b1 = MD5(S + RA) c(1) = p1 xor b1
b2 = MD5(S + c(1)) c(2) = p2 xor b2

What was implemented looked nothing like that.

@edysli
Copy link
Contributor

edysli commented Oct 28, 2019

@darrenstarr Can you provide a unit test for that fix?
I've glanced at RFC 2865 but couldn't find any test vectors for that encryption algorithm.

@ctran ctran added the Reviewed label Oct 14, 2021
@ctran ctran force-pushed the master branch 3 times, most recently from 67019ad to 5526820 Compare February 1, 2022 18:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants