[asterisk-security] register response calculation

sipResearcher sipmailing at yahoo.com
Sat Mar 1 07:46:13 CST 2008


Hi,
   
  I have a simple question about SIP messaging. When a SIP client wants to register to SIP registrar (for example asterisk), it sends a REGISTER message and receives a Unauthorized message with a nonce value and it calculates a challenge response using username password and this nonce value. A looked up to the rfc about regsitration process but I couldn't understand how it computes this response value. 
   
  What is the formula for this calculation. Which parameters does it use exactly?

       
---------------------------------
Looking for last minute shopping deals?  Find them fast with Yahoo! Search.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-security/attachments/20080301/8bcb7fe0/attachment.htm 


More information about the asterisk-security mailing list