Radius 中 与Response Authernticator 与 Message-Authenticator的计算

  /*

                String RequestStr3 = @"01 00 00 9E EB B2 E8 D9 1E 52 10 03 FB E1 52 39 27 58 93 F0 01 0E 33 34 38 30 62 33 34 32 61 30 61 33 02 12 56 BE 23 D1 61 13 7F E5 95 21 CB 44 B9 32 D4 49 04 06 C0 A8 08 05 20 07 68 65 6C 6C 6F 1E 1A 41 30 2D 36 33 2D 39 31 2D 38 42 2D 30 39 2D 35 30 3A 48 44 41 50 30 35 1F 13 33 34 2D 38 30 2D 42 33 2D 34 32 2D 41 30 2D 41 33 3D 06 00 00 00 13 4D 18 43 4F 4E 4E 45 43 54 20 31 31 4D 62 70 73 20 38 30 32 2E 31 31 62 50 12 B8 4B 87 5E 53 77 2C FA 90 16 E3 B5 5F 4E CA FD ";

             */

            var requestStr = RequestStr3;

            var responseStr = @"02-00-00-2C-57-CE-42-DB-EB-9F-DA-5D-B3-E5-DB-D0-9E-75-92-BA-1B-06-00-98-96-7F-50-12-D1-B1-36-29-F5-7D-1C-65-CB-BC-DA-57-DE-49-E7-3C";

            var responseArr = responseStr.Split("-".ToCharArray(), StringSplitOptions.RemoveEmptyEntries);

            var responseBytes = new List<byte>();

            foreach (var item in responseArr)

            {

                responseBytes.Add(byte.Parse(item, NumberStyles.HexNumber));

            }

            var responsePaket = nRadiusPaket.Parser(responseBytes.ToArray());

            var request = GetRequestPaket();

            var autherRaw = new List<byte>();

            autherRaw.Add();

            autherRaw.Add();

            autherRaw.AddRange(new byte[] { , 0x2C });

            autherRaw.AddRange(request.Authenticator);

            foreach (var a in responsePaket.Attributes)

            {

                autherRaw.AddRange(a.Paket);

            }

            autherRaw.AddRange(Encoding.ASCII.GetBytes(""));

            var md5 = new MD5CryptoServiceProvider();

            var authernticatorMd5 = md5.ComputeHash(autherRaw.ToArray());

            Console.WriteLine("MD5:" + BitConverter.ToString(authernticatorMd5));

            Console.WriteLine("TAG:" + BitConverter.ToString(responsePaket.Authenticator));

            var MAuthRaw = new List<byte>();

            MAuthRaw.Add();

            MAuthRaw.Add();

            MAuthRaw.AddRange(new byte[] { , 0x2C });

            MAuthRaw.AddRange(request.Authenticator);

            foreach (var a in responsePaket.Attributes)

            {

                if (a.Paket[] == )

                {

                    MAuthRaw.AddRange(a.Paket.Take());

                    for (int i = ; i < ; i++)

                    {

                        MAuthRaw.Add();

                    }

                }

                else

                {

                    MAuthRaw.AddRange(a.Paket);

                }

            }

            var hmacMD5 = HMACMD5.Create("HMACMD5");

            hmacMD5.Key = Encoding.ASCII.GetBytes("");

            var hmacBytes= hmacMD5.ComputeHash(MAuthRaw.ToArray());

            Console.WriteLine("HMAC-TAG:D1-B1-36-29-F5-7D-1C-65-CB-BC-DA-57-DE-49-E7-3C");

            Console.WriteLine("HMAC-Cup:" + BitConverter.ToString(hmacBytes));

1.Message-Authenticator计算时
参考文档:

      Message-Authenticator = HMAC-MD5 (Type, Identifier, Length,

      Request Authenticator, Attributes)

      When the checksum is calculated the signature string should be

      considered to be sixteen octets of zero.
这里的Type,应该是Response paket的 Code， Attributes,由于包括了Message-Authenticator Attribute,
在计算时间时，填充16个字节的0来计算，即 byte[]{80,18,00,00...,00}
另外HMAC-MD5(Type, Identifier, Length, Request Authenticator, Attributes)表示
HMAC-MD5(Type + Identifier + Length +Request Authenticator + Attributes)

Access-Accept packet中type= byte[]{02},Attributes 是完整包，如 Message-Authenticator Attribute =byte[]{80,18,x,x,x....x},      

2.Response Authernticator 的计算，需要先完成上面的Message-Authernticator 计算

3.User-Password字段的计算与解密

     /// <summary>

        ///

        /// </summary>

        /// <param name="pwdAttrPaket">User-Password段，包括type跟length+x...</param>

        /// <param name="SharedSecret"></param>

        /// <param name="RequestAuthenticator"></param>

        /// <returns></returns>

        public static byte[] EncodePAPPwd(String pwdStr, string SharedSecret, byte[] RequestAuthenticator)

        {

            var pwdBytes = Encoding.Default.GetBytes(pwdStr);

            var dataLen = pwdBytes.Length / ;

            var r = pwdBytes.Length % ;

            if (r != )

            {

                dataLen++;

            }

            var pArr=new byte[dataLen * ];

            Array.Copy(pwdBytes, pArr, pwdBytes.Length);

            //补0字节处理

            if (r != )

            {

                for (int i = pwdBytes.Length; i < pArr.Length; i++)

                {

                    pArr[i] = ;

                }

            }

            var bi = new byte[];

            var ciArr = new byte[pArr.Length];

            var shareSecretBytes = Encoding.Default.GetBytes(SharedSecret);

            var tmp = new byte[shareSecretBytes.Length + ];

            Array.Copy(shareSecretBytes, tmp, shareSecretBytes.Length);

            Array.Copy(RequestAuthenticator, , tmp, shareSecretBytes.Length, );

            Array.Copy(MD5.Create("MD5").ComputeHash(tmp), bi, );

            for (int i = ; i < dataLen; i++)

            {

                for (int bIndex = ; bIndex < ; bIndex++)

                {

                    ciArr[i *  + bIndex] =(byte)( bi[bIndex] ^ pArr[i *  + bIndex]);

                }

                Array.Copy(ciArr, i * , tmp, shareSecretBytes.Length, );

                Array.Copy(MD5.Create("MD5").ComputeHash(tmp), bi, );

            }

            return ciArr;

        }

        /// <summary>

        ///

        /// </summary>

        /// <param name="pwdAttrPaket">User-Password段，包括type跟length+x...</param>

        /// <param name="SharedSecret"></param>

        /// <param name="RequestAuthenticator"></param>

        /// <returns></returns>

        public static byte[] DecodePAPPwd(byte[] pwdAttrPaket, string SharedSecret, byte[] RequestAuthenticator)

        {

            var chunksCount = (pwdAttrPaket.Length - ) / ;

            var biArr = new byte[pwdAttrPaket.Length - ];

            var shareSecretBytes= Encoding.Default.GetBytes(SharedSecret);

            var tmp = new byte[shareSecretBytes.Length + ];

            Array.Copy(shareSecretBytes, tmp, shareSecretBytes.Length);

            Array.Copy(RequestAuthenticator, , tmp, shareSecretBytes.Length, );

            Array.Copy( MD5.Create("MD5").ComputeHash(tmp),biArr,);

            for (int i = ; i < chunksCount; i++)

            {

                Array.Copy(pwdAttrPaket, ((i - ) * ) + , tmp, shareSecretBytes.Length, );

                Array.Copy(MD5.Create("MD5").ComputeHash(tmp), , biArr, i * , );

            }

            for (int i = ; i < biArr.Length; i++)

            {

                biArr[i] =(byte)( biArr[i] ^ pwdAttrPaket[ + i]);

            }

            return biArr;

        }