[22430] in Kerberos
Re: Does Kerberos Encrypt Authentication AND Traffic?
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Fri Sep 10 18:14:50 2004
In-Reply-To: <52E5FC52.11FD84D4.0006C4A3@netscape.net>
Mime-Version: 1.0 (Apple Message framework v619)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <25E20216-0376-11D9-ABEA-000A95909EE2@mit.edu>
Content-Transfer-Encoding: 7bit
From: Ken Raeburn <raeburn@mit.edu>
Date: Fri, 10 Sep 2004 18:09:56 -0400
To: testls@netscape.net
cc: "'kerberos@mit.edu'" <kerberos@mit.edu>
Errors-To: kerberos-bounces@mit.edu
On Sep 9, 2004, at 20:06, testls@netscape.net wrote:
> Does Kerberos Encrypt Authentication AND Traffic?
Kerberos, the protocol, will authenticate using encryption, and provide
an encryption key that can be used by an application protocol (such as
telnet) or another sub-application mechanism (like the krb5 gssapi
mechanism, which is used by ftp for example).
When you say "encrypt authentication", it sounds to me like you're
thinking of encrypting a password exchange. The authentication isn't
an exchange which happens to be encrypted; the cryptography is part of
the authentication method in the base protocol. Successful decryption
(and subsequent verification) of some data, which does not include a
password, is how an identity is authenticated.
Kerberos, the software package from MIT, implements the Kerberos
protocol, and has applications which can generally behave either way as
far as encrypting the session. It is not the only software package
which implements the Kerberos protocol.
> Some are saying that Kerberos will only encrypt the authentication.
>
> Others are saying that Kerberos will encrypt BOTH the AUTHENTICATION
> and the TELNET SESSION.
Depends on the application protocol and the software, and whether
you're referring to the base Kerberos protocol, the MIT Kerberos
package, or application protocols using Kerberos.
Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
