[22519] in Kerberos
Re: Key derivation with non-ASCII characters
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Tue Sep 21 10:32:51 2004
Message-ID: <415039BD.7010109@nyc.rr.com>
From: Jeffrey Altman <jaltman2@nyc.rr.com>
Date: Tue, 21 Sep 2004 14:15:29 GMT
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Thanks to Microsoft we have an answer to this question.
Apparently, Windows does not use UTF-8 for the DES string to key
operations. UTF-8 is only used for RC4-HMAC.
In the DES string to key operations, the current locally defined
OEM Code Page is used.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CodePage\OEMCP.
Of course, this can result in all of the problems associated with
non-ASCII characters as described in Kerberos Clarifications if the
OEM Code Page of the client does not match the character-set of the
KDC.
If you are going to use DES keys you had better stick to ASCII only
names.
Jeffrey Altman
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
