Search code examples
c#.netsecurityradiusfips

Is there FIPS compliant RADIUS .NET solution?

I am wondering if there is a FIPS compliant solution for authenticating with a RADIUS server via .NET , such as http://code.google.com/p/radius-net/source/browse/trunk/radius-net/src/?r=4

The problem with the linked one that makes it not compliant with FIPS is the use of MD5, which is not a secure algorithm according to this standard.

Solution

  • MD5 makes the whole RADIUS protocol non-compliant, not just one particular client.

    See Does RADIUS’s use of the MD5 algorithm make it not FIPS validated for an application that allows RADIUS authentication?

    There is no such thing as a FIPS-compliant implementation of an algorithm that isn't FIPS-compliant.

    And you've been told this before: Override MD5 to make it FIPS validated?