LST Subscriber Hash and Encryption

You can use AES-128 CBC to encrypt the hash in the subscriber element in the LST XML file. The PSK used for encryption is configured in the secret parameter and an 8-byte pseudo random number is used as the salt.

The LST file must set the encrypted attribute per subscriber element to true. To derive the final encrypted data you place in the XML file, three steps are performed according to the following blocks. The output of the last step, Formatting final Encrypted Data, is inserted into the LST files, subscriber element’s hash value, when the encrypted attribute is set to true.

Key Initialization Vector

This diagram shows the inputs to generate the key for the initializaiton vectorl

Encryption

This diagram shows the inputs for creation of the cipher text.

Formatting Final Encryption

This diagram shows how the final encryption is formatted.