HP-UX AAA Server A.08.00.01 Administrator's Guide

Table 17-19 3GPP Milenage Parameters (continued)
DescriptionParameter
128-bit values used to compute f1, f1*, f2,
f3, f4, f5, f5*
C1-C5
Integer rotation constants used to compute f1,
f1*, f2, f3, f4, f5, f5*
R1-R5
The Ek kernel function specified by 3GPP Milenage is 128-bit AES (Rijndeal).
The 3GPP Milenage A3 algorithm has two variants corresponding to recommended
SRES derivation function #1 and recommended SRES derivation function #2. The A3
function is affected by the choice, while the A8 function is unaffected. The selection of
A3 variant #1 or #2 constitutes another parameter, A3-Variant. The AKA algorithm
is unaffected by this parameter.
The selection of parameter values must match the characteristics of the client devices
to be authenticated.
Table 17–6 lists the configuration parameters available in aatv.3GPP-Milenage{}
block in aaa.config file.
Table 17-20 Configuration Parameters of aatv.3GPP-Milenage{} Block
DescriptionParameter
128-bit operator-specific constant. The OP value
must be specified by each operator. Milenage
specifies no default value.
OP
If not explicitly configured, the default value is
0x00000000.00000000.00000000.00000000. Use of this
value generates a warning message in the logfile.
128-bit computation constant. C1 must have even
parity. Use of a value with odd parity generates a
C1
warning message in the logfile. Milenage
specifies the default value.
If not explicitly configured, the default value is
0x00000000.00000000.00000000.00000000.
128-bit computation constant. C2 must have odd
parity. Use of a value with even parity generates a
C2
warning message in the logfile. Milenage
specifies the default value.
If not explicitly configured, the default value is
0x00000000.00000000.00000000.00000001.
128-bit computation constant. C3 must have odd
parity. Use of a value with even parity generates a
C3
Generating Authentication Vectors Using A3, A8, and AKA Algorithms 265