[1114] in Kerberos_V5_Development
Re: OV admin system integration plan
daemon@ATHENA.MIT.EDU (Bill Sommerfeld)
Mon May 6 08:47:40 1996
To: Marc Horowitz <marc@MIT.EDU>
Cc: krbdev@MIT.EDU, "Donald T. Davis" <don@cam.ov.com>
In-Reply-To: Your message of "Sun, 05 May 1996 23:55:39 EDT ."
<199605060355.XAA07537@cutter-john.mit.edu>
Date: Mon, 06 May 1996 08:33:25 -0400
From: Bill Sommerfeld <sommerfeld@orchard.medford.ma.us>
-----BEGIN PGP SIGNED MESSAGE-----
I don't think performance in session key generation in the kdc is that
important. KDC's tend to process a fairly small number of keys, the
blocks which get encrypted are comparatively large (order 100 bytes),
you don't issue all that many of them (a few a second, max during peak
login times), and computers are getting faster and faster.
BBS involves modular exponentiation. I think the original version
used one modular exponentiation operation *per bit* of output.
BTW, the "few per second" isn't quite true, especially if you have
a) large numbers (hundreds to thousands) of people logging in near
simultaneously (think "call center at shift change").
b) immediately upon login, everyone starts several apps, all
of which need tickets.
I'm told that some of HP's DCE customers have installations like this..
- Bill
-----BEGIN PGP SIGNATURE-----
Version: 2.6.1
iQCVAwUBMY3xkrT+rHlVUGpxAQGVsQP+L3kOCXyNXxACRe4mWQ1KJVkmIJsqTAbx
PoYFP3dlsJXPkBWx1x7v5+XReIswn3hb9HE1/t+GPxGLh55VcoitNL0CDeKySmHI
mn/tqvxNYy3xiEgHlcopmV3aO0eTUKZf7+Jhgi9WM8/Z/XeuKZJ75pvBlcqDcov1
Fle9NZ7t+UQ=
=nWG7
-----END PGP SIGNATURE-----
