SIP Digest Authentication

Calculating a digest response header for MD5 without qop is simply a matter of concatenating the HA1, nonce, and HA2:

response = MD5(HA1, nonce, HA2)

A1 is calculated as

HA1 = MD5(username ":" realm ":" password)

A2 is:

HA2 = MD5(method ":" uri)

Note that this means you can store just the HA1, you don't need to keep the plaintext password in order to be able to authenticate users. Of course, the HA1 can still be used for authenticating against that realm and user, but it doesn't reveal the plain text password (which may be in use elsewhere, too).

 
sip/digest.txt · Last modified: 2007/10/28 18:48 by Theo Zourzouvillys
 
Except where otherwise noted, content on this wiki is licensed under the following license:CC Attribution-Noncommercial-Share Alike 3.0 Unported
Recent changes RSS feed Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki