Capwap Mailing List: Re: Issue 152: Need crypto protocol agility

[David B. Nelson (dnelson]

Pat Calhoun wrote:

> 12.1.5.  Use of MD5
>
>    The Image Information Section 4.6.29) message element makes use of
>    MD5 to compute the hash field.  It is important to note that in order
>    to preserve interoperability with existing CAPWAP implementations, it
>    was decided to not provide protocol agility.  That said, it is also
>    important to note that the use of MD5 in this context is 
                                                               ^ not
>    to create a
>    cryptographically secure hash, but instead to provide a basic
>    checksum value.  Therefore, the use of MD5 is not considered a
>    security vulnerability.