[6766] in Kerberos

home help back first fref pref prev next nref lref last post

Re: PD Kerberos Implementations

daemon@ATHENA.MIT.EDU (David Wright)
Mon Feb 26 12:35:39 1996

To: kerberos@MIT.EDU
Date: 26 Feb 1996 11:57:06 -0500
From: wright@clam.Hi.COM (David Wright)

In article <4gedmh$ivn@paperboy.osf.org> rsalz@osf.org (Rich Salz) writes:
>>  DCE is also a good starting point, but they'll probably 
>>try to sell you an _EXPORT QUALITY_ version - but watch it, it's crypto 
>>is not there for confidentiality.)
>
>At least two companies -- SNI and Hitachi or Fujitsu -- have full DCE
>privacy/confidentiality in their products.
>
>Sincere apologies to both Hitachi and Fujitsu for my poor memory.

We forgive you.  (Well, I can't speak for Fujitsu; for all I know,
they put out a contract on you.)

Hitachi's DCE does contain full privacy, but only in the US domestic
version.  (Damn export restrictions.)  The export version supports
message integrity (cryptographic checksum), but not message encryption.

  -- David Wright, Hitachi Computer Products (America), Inc.  Waltham, MA
     wright@hi.com  ::  These are my opinions, not necessarily Hitachi's,



home help back first fref pref prev next nref lref last post