[1112] in Kerberos_V5_Development
Re: OV admin system integration plan
daemon@ATHENA.MIT.EDU (Marc Horowitz)
Sun May 5 23:55:56 1996
To: "Donald T. Davis" <don@cam.ov.com>
Cc: krbdev@MIT.EDU
In-Reply-To: Your message of "Sun, 05 May 1996 22:07:15 EDT."
<199605060207.WAA05155@gza-client1.cam.ov.com>
Date: Sun, 05 May 1996 23:55:39 EDT
From: Marc Horowitz <marc@MIT.EDU>
In message <199605060207.WAA05155@gza-client1.cam.ov.com>, "Donald T. Davis" <don@cam.ov.com> writes:
>> the soundest prng is blum, blum, and shub, but it's also
>> one of the slowest. afaik, the only prng's that have
>> been proven to be random and to be unpredictable (modulo
>> complexity assumptions), are all much slower than des.
I don't think performance in session key generation in the kdc is that
important. KDC's tend to process a fairly small number of keys, the
blocks which get encrypted are comparatively large (order 100 bytes),
you don't issue all that many of them (a few a second, max during peak
login times), and computers are getting faster and faster.
Marc
