[20464] in Kerberos_V5_Development
Re: KDC TGT enctype selection question
daemon@ATHENA.MIT.EDU (Sam Hartman)
Mon Dec 4 17:24:00 2023
From: Sam Hartman <hartmans@debian.org>
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>, krbdev@mit.edu
In-Reply-To: <202312042046.3B4KkhGs002710@hedwig.cmf.nrl.navy.mil>
Date: Mon, 04 Dec 2023 15:23:43 -0700
Message-ID: <tslwmtthaj4.fsf@suchdamage.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
>>>>> "Ken" == Ken Hornstein via krbdev <krbdev@mit.edu> writes:
Ken> And the resulting TGT decryption fails because the first key is
Ken> the sha384 key _and_ the TGT key retrieved by find_server_key()
Ken> is the first one (because search_enctype is -1) which is the
Ken> sha384 key, and that doesn't match the enctype in the TGT
Ken> ticket (which is sha1).
Ken> The question I have is ... why does this explicit matching for
Ken> the first key in the highest kvno exist for non-crossrealm
Ken> TGTs? The comments say it is deliberate, but I will confess
Ken> that I am not sure why! It is fair to say that having your
Ken> KDCs support and/or issue different encryption types in tickets
Ken> is a misconfiguration, but I can't quite see why things are
Ken> explictly coded that way.
Because there was a bit of an overload between whether the presence of a
key in the database was intended to actually encourage use of that key
for a given service or whether it simply meant that a particular session
key was supported by that service.
Especially when some of the keys were weak but you wanted to retain
those keys on your tgt so you could get session keys of those weak
enctypes for some of your clients/services, we thought it was important
not to allow downgrade attacks to be mounted against the TGS service
itself.
And so, we assumed you ordered your TGS keys based on the order you
actually considered strongest.
--Sam
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
