security question - md5

From: Brad Ellis (bellis@xxxxxxxxxxxxxx)
Date: Fri Nov 09 2001 - 02:17:01 GMT-3


   
Does anyone know if IOS v.11.3 calculates the MD5 hashing algorithm
differently than 12.0 (is there a different version of MD5 that 11.3 uses
vs. 12.0)? I have a couple routers trying to do some OSPF authentication,
one with 11.3 and the other with 12.0. They would not authenticate with
each other even though the keys were identical. Using the same config, it
worked when I put 12.1 code on the router. Which tells me there is either
a) an incompatibility between 11.3 MD5 and 12.0 MD5 or a bug in the IOS I
was using. Im leaning towards a bug in the IOS, since I thought MD5 was a
standard defined in RFC 1321. Is there anything Im missing? Are there
different versions of MD5 floating around?

Im having the same problem now between the same 11.3 IOS code and my PIX
while trying to authenticate RIP. So Im really leaning towards the IOS
issue, I was just curious if anyone has seen something similar.

thanks,
-Brad Ellis
CCIE#5796 (R&S / Security)
Network Learning Inc
bellis@ccbootcamp.com



This archive was generated by hypermail 2.1.4 : Fri Jun 21 2002 - 06:45:10 GMT-3