SIP digest auth calculator

[Oleg Volkov]

Hello!

I need to check some client for correct auth.

I make small tools for it:

https://github.com/OlegPowerC/SIPdigestCalculator

Usage:

SIPdigestcalculator.exe -u username -r realm -p password -n nonce -uri SIP URI
or
SIPdigestcalculator.exe -u username -r realm -p password -n nonce -cn client nonce -nc nonce count -uri SIP URI

for examle in my lab:

REGISTER sip:192.168.55.167:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.55.166:5060;branch=z9hG4bK20D124F
From: <sip:007862@192.168.55.167>;tag=2D3108C-F41
To: <sip:007862@192.168.55.167>
Date: Mon, 01 Feb 2021 11:21:42 GMT
Call-ID: 8E725EBC-63B311EB-830D9A18-B30DA702
User-Agent: Cisco-SIPGateway/IOS-12.x
Max-Forwards: 70
Timestamp: 1612178502
CSeq: 15 REGISTER
Contact: <sip:007862@192.168.55.166:5060>
Expires: 3600
Authorization: Digest username="007862",realm="asterisk",uri="sip:192.168.55.167:5060"
RTR01#,response="611d34af182ff56ffec67a04ce8561e5",nonce="1612176383/ac153881bb7f5c7fafe2179aa4ed5617",opaque="2c3ad55e0cf9fae1",cnonce="CC77FDAA",qop=auth,algorithm=md5,nc=00000001
Content-Length: 0

I can check it by my tool like this:

SIPDigestCalculator.exe -u 007862 -r asterisk -p 1q2w3e -n 1612176383/ac153881bb7f5c7fafe2179aa4ed5617 -uri sip:192.168.55.167:5060 -cn CC77FDAA -nc 00000001

result:

A1: 007862:asterisk:1q2w3e
HA1: 64e5dd333209a9af67ec11d61b3c6479
A2: REGISTER:sip:192.168.55.167:5060
HA2: 7df6ad58ee02df3e342fe72722bd624c
Response: 611d34af182ff56ffec67a04ce8561e5

[Daniel Mordukhov]

Hey, a really nice tool. Would have been nice to choose a method like INVITE instead of REGISTER.

[b.winter]

Hi @Oleg Volkov;

nice tool.

@Daniel Mordukhov: Why do you think, you need to choose the SIP message? The algorithm used for authentication is the same

[daniel.mordukhov]

This app only calculates the MD5 hash of the REGISTER SIP packet. I had a situation where i needed to calculate the MD5 hash value of the INVITE packet. I used the below formula

HA1=MD5(username:realm:password)
HA2=MD5(method:digestURI)

response = (HA1:nonce:nonceCount:cnonce:qop:HA2)

As you see to calculate hash to I needed to use INVITE as a method. I'm sure it is just another variable to add to the app.

[b.winter]

Yes, you are correct. My bad.

Wasn't reading my own notes carefully enough.