[19311] in Kerberos
Re: Encryption Types and Windows
daemon@ATHENA.MIT.EDU (Sam Hartman)
Sun May 25 17:46:27 2003
To: "Jason C. Wells" <fake@highperformance.net>
From: Sam Hartman <hartmans@MIT.EDU>
Date: Sun, 25 May 2003 17:45:21 -0400
In-Reply-To:
<Pine.BSF.4.44.0305241306450.7427-100000@s1.stradamotorsports.com> (Jason
C. Wells's message of "Sat, 24 May 2003 13:21:49 -0700")
Message-ID: <tsln0hag0pa.fsf@konishi-polis.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
[I'm not sure if your email address is real. As a matter of policy I
do not respond to posts to kerberos@mit.edu that do not use working
email addresses, so if this bounces, you should not expect future
responses at least from me.
]
>>>>> "Jason" == Jason C Wells <fake@highperformance.net> writes:
Jason> On Windows 2000, are the supported encryption types part of
Jason> Windows itself, or part of the MIT KfW-2.1.1 package?
Both. Windows SSPI supports des and rc4. (By DES, I mean both
des-cbc-md5 and des-cbc-crc)
KFW supports DES and 3DES.
If you use ms2mit.exe, you are at some level limited to the
intersection of these two.
A KFW based on Kerberos 1.3 will support DES, 3DES, RC4 and AES, but
that code is not yet released.
Jason> Related to the above: Is it true that only DES-CBC-MD5 and
Jason> DES-CBC-CRC are supported under Windows 2000 for
Jason> authentication that occurs via the MIT KfW-2.1.1 package?
No, you can also use 3DES.
Jason Jason> What is the authoritative and current source of information
Jason> for the encryption types for MIT Kerberos? For MIT KfW?
The source code.
In particular look at src/lib/crypto/enctypes.c.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
