anchor.diff:  %% Returns a list of all test cases in this test suite.
   %%
   all() ->
  -	[eap_identity, pwd_id, pwd_commit, pwd_confirm,
  -			message_authentication, validate_eap_code, validate_pwd_id_token].
  +	[eap_identity, pwd_id, pwd_commit, pwd_confirm, message_authentication,
  +			validate_eap_code, validate_pwd_id_cipher, validate_pwd_id_token].
   
   %%---------------------------------------------------------------------
   %%  Test cases
  
positive.code: 			UserName, Secret, MAC, ReqAuth2, RadId2, EapMsg),
  	{error, timeout} = gen_udp:recv(Socket, 0, 2000).
  
  validate_pwd_id_token() ->
  	[{userdata, [{doc, "Send invalid EAP-pwd-ID (bad token)"}]}].
  
  validate_pwd_id_token(Config) ->
  	PeerId = <<"78901234">>,
  	MAC = "ab:cd:ef:fe:dc:ba",
  	PeerAuth = list_to_binary(ocs:generate_password()),
  	ok = ocs:add_subscriber(PeerId, PeerAuth, []),
  	Socket = ?config(socket, Config),
  
negative.code: 	RadId2 = RadId1 + 1,
  	ReqAuth2 = radius:authenticator(),
  	InvalidToken = crypto:rand_bytes(4),
  	EapPwdId = #eap_pwd_id{group_desc = 20, random_fun = 16#1, prf = 16#1,
  			token = InvalidToken, pwd_prep = none, identity = PeerId},
  	EapPwd = #eap_pwd{pwd_exch = id, data = ocs_eap_codec:eap_pwd_id(EapPwdId)},
  	EapPacket  = #eap_packet{code = request, type = ?PWD,
  