[589] in Kerberos
Re: string_to_key
daemon@TELECOM.MIT.EDU (Bill Sommerfeld)
Tue Jan 10 16:45:52 1989
From: Bill Sommerfeld <wesommer@ATHENA.MIT.EDU>
To: ota+@ANDREW.CMU.EDU
Cc: kerberos@ATHENA.MIT.EDU
The existing string_to_key algorithm is closer to your suggestion than
you realized:
It:
1) fanfold/XOR's the string into a 56 bit "temporary key".
2) uses that temporary key (instead of "kerberos" << 1, in your
suggestion) to compute the 64 bit des_cbc_cksum() of the string.
and finally
3) forces the 64 bit checksum to odd parity and uses that as the
generated key.
- Bill
