[18990] in Kerberos_V5_Development
Re: Replay cache avoidance
daemon@ATHENA.MIT.EDU (Nico Williams)
Mon Sep 1 22:38:24 2014
MIME-Version: 1.0
In-Reply-To: <776614843.63.1409621076889.JavaMail.root@thunderbeast.private.linuxbox.com>
Date: Mon, 1 Sep 2014 21:38:09 -0500
Message-ID: <CAK3OfOgLM8EVgU0rbSveXFHB0=RJ5pxtRbvKSapYi6BGAaWzEQ@mail.gmail.com>
From: Nico Williams <nico@cryptonector.com>
To: "Matt W. Benjamin" <matt@cohortfs.com>
Cc: "heimdal-discuss@sics.se" <heimdal-discuss@sics.se>,
Marcus Watts <mdw@cohortfs.com>, "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Mon, Sep 1, 2014 at 8:24 PM, Matt W. Benjamin <matt@cohortfs.com> wrote:
>> For example, NFS is such a protocol. There's no need to use an
>> rcache for the NFS service.
>
> Thank you for the confirmation. This has come up as an an issue for us with MIT Krb5.
Although you need to beware of a subtlety I only mentioned in passing:
you need to be using a "newer" enctype, which means AES or Camellia
(see RFC4121).
For enctypes prior to RFC4121 there's no requirement that the
initiator use the sub-session key asserted by the acceptor. (I forget
if RC4 does it always, and what the interop matrix looks like for
3DES. 1DES, of course, is out.)
Nico
--
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
