Camera authentication

Answered

cgjeon

February 03, 2026 07:35

Hi,

Basically, I know that the product complies with the ONVIF standard and can authenticate the camera using either Digest or Basic authentication.

I tested using WireShark and was able to confirm that Digest authentication was being used. However, I couldn't verify the encryption algorithm used in Digest authentication using my test camera. (I wanted to confirm that Digest authentication complies with RFC 7616.)

I would like to confirm the following:

If Digest authentication was used for camera authentication, what encryption algorithm is used?

(Of course, please answer assuming that the camera device supports md5, sha256, or other algorithms.)

 

Thank you.

0

• 

  Norman

  • Network Optix team

  July 17, 2026 15:02

  Hi cgjeon,

  We can confirm that our product supports RFC 7616 (HTTP Digest Access Authentication) for device authentication.

  To answer your specific question about which encryption (hashing) algorithm is used during the challenge-response process, it depends entirely on what is negotiated between the VMS and the camera device:

  • SHA-256 Support (RFC 7616): Since our product complies with RFC 7616, it is fully capable of using SHA-256 or SHA-256-sess for generating the digest. If your camera supports and prioritizes SHA-256, our product will successfully authenticate using this stronger algorithm.
  • Fallback to MD5 (RFC 2617 / RFC 7616): For backwards compatibility with older ONVIF legacy devices, MD5 and MD5-sess are also supported.

  Best regards.

  0

Please sign in to leave a comment.