[j-nsp] Unscramble authentication-key

[Robert Kiessling]

"Eric Van Tol" <eric at atlantech.net> writes:

> An aside to this is, if the remote end is a Cisco, there are tools out
> there that can easily decode their encryption strings.  SolarWinds
> (www.solarwinds.net) makes a tool that can decode the Cisco strings. 

Such tools have been out for ages.

> It
> cannot do MD5, though, so you may be out of luck if the remote end is
> not a Cisco.

The secret is *not* MD5 hashed in the JunOS config. And it cannot be
since JunOS need access to the cleartext secret in order to use it to
calculate the MD5 checksum.

Robert