Thanks much for the response.
But I still can't get the correct response value even I use another md5 hash
function.
So I guess it is not the md5 hash function problem.
Following is my procedure:
I use this to calculate H(A1)
0x38, 0x31, 0x40, 0x72, 0x64, 0x36, 0x2e, 0x61, 0x73, 0x75,
0x73, 0x2e, 0x63, 0x6f,
0x6d, 0x2e, 0x74, 0x77,
0x3a,
0x72, 0x64, 0x36, 0x2e, 0x61, 0x73, 0x75, 0x73, 0x2e, 0x63,
0x6f,
0x6d, 0x2e, 0x74, 0x77,
0x3a,
0x38, 0x31
result:
0xa8, 0x9e, 0xa1, 0xc5, 0xe1, 0x7c, 0xd4, 0x0b,
0xcc, 0xd0, 0x6a, 0x2b, 0xe3, 0x33, 0xdf, 0x1b
And this to calculate H(A2)
0x52, 0x45, 0x47, 0x49, 0x53, 0x54, 0x45, 0x52,
0x3a,
0x72, 0x64, 0x36, 0x2e, 0x61, 0x73, 0x75, 0x73, 0x2e, 0x63,
0x6f,
0x6d, 0x2e, 0x74, 0x77
result:
0x9c, 0xc7, 0x03, 0x45, 0x5c, 0x7e, 0x51, 0xd2,
0xa6, 0x51, 0xd6, 0x5a, 0xf9, 0xc6, 0x1d, 0x84
then I use:
0xa8, 0x9e, 0xa1, 0xc5, 0xe1, 0x7c, 0xd4, 0x0b,
0xcc, 0xd0, 0x6a, 0x2b, 0xe3, 0x33, 0xdf, 0x1b,
0x3a,
0x30, 0x64, 0x31, 0x31, 0x32, 0x38, 0x66, 0x31, 0x38, 0x30,
0x36, 0x38, 0x37, 0x32,
0x64, 0x65, 0x61, 0x63, 0x34, 0x65, 0x30, 0x31, 0x30, 0x32,
0x39, 0x62, 0x37, 0x63,
0x39, 0x36, 0x62, 0x33,
0x3a,
0x9c, 0xc7, 0x03, 0x45, 0x5c, 0x7e, 0x51, 0xd2,
0xa6, 0x51, 0xd6, 0x5a, 0xf9, 0xc6, 0x1d, 0x84
And the result:
0x07, 0x6d, 0xe3, 0xa6, 0xc9, 0x88, 0xcd, 0xda,
0x25, 0x19, 0xac, 0xe9, 0x0a, 0x94, 0x48, 0xf9
Please point me out what's wrong with this.
Regards
Steven
-----Original Message-----
From: Sankaran Narayanan [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 07, 2002 5:01 AM
To: Steven Wang(���R��)
Subject: Re: [Sip-implementors] sip digest authentication
My reply was wrong - this is not the response. Your Authorization header
is correct. Concating uri with quotes is also wrong. However, your way of
generating A1 and A2 in the other way is correct. What are you doing to
calculate the response ? which MD5 implementation ?
On Thu, 6 Jun 2002 [EMAIL PROTECTED] wrote:
> It seems the correct value is
>
> Digest username="[EMAIL PROTECTED]", realm="rd6.asus.com.tw",
> nonce="0d1128f1806872deac4e01029b7c96b3", uri="rd6.asus.com.tw",
> response="59f013a5be3ef182ecba02
> 04ad27d684", opaque="", algorithm="MD5"
>
>
> are you using the full user name ?
> >
> > ---------- Forwarded message ----------
> > Date: Thu, 6 Jun 2002 18:13:20 +0800
> > From: [EMAIL PROTECTED]
> > To: [EMAIL PROTECTED]
> > Subject: [Sip-implementors] sip digest authentication
> >
> > hi,
> >
> > For sip digest authentication, I assume its using following hash
function.
> > H( H(A1) : nonce : H(A2) )
> > where A1 is username:realm:password
> > and A2 is method:uri
> > if no qop and algorithm is md5
> > But after testing with some implementations, it seems wrong.
> >
> > For example the Registration procedure gets response with :
> > WWW-Authenticate = Digest realm="rd6.asus.com.tw",
> > nonce="0d1128f1806872deac4e01029b7c96b3"
> > stale=FALSE, algorithm=MD5
> >
> > the retry is
> > Authorization = Digest username="[EMAIL PROTECTED]",
> > realm="rd6.asus.com.tw",
> > nonce="0d1128f1806872deac4e01029b7c96b3"
> > uri="rd6.asus.com.tw"
> > response="2923fb70ddfdf57f7ffe5cc436ab4889"
> > opaque=""
> > algorithm=MD5
> >
> > But I cannot get the correct response field like this.
> > The password is 81
> > I am using
> > A1 = [EMAIL PROTECTED]:rd6.asus.com.tw:81
> > A2 = REGISTER:"rd6.asus.com.tw"
> > and get response = 1cfb5cb73cbbca92c3c47885411ae31b
> >
> > if I use
> > A2 = REGISTER:rd6.asus.com.tw
> > I get response = 076de3a6c988cdda2519ace90a9448f9
> >
> > I seems both of them are incorrect.
> > Did I miss anything?
> >
> > Regards
> >
> > Steven
> > _______________________________________________
> > Sip-implementors mailing list
> > [EMAIL PROTECTED]
> > http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
> >
>
>
> _______________________________________________
> Sip-implementors mailing list
> [EMAIL PROTECTED]
> http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
>
_______________________________________________
Sip-implementors mailing list
[EMAIL PROTECTED]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
