[600] in Kerberos_V5_Development
the need for a 'combine_key' EP in the cs_table
jtkohl@ATHENA.MIT.EDU (jtkohl@ATHENA.MIT.EDU)
Fri Feb 8 15:57:45 1991
It looks like we need to add another entry to the cryptosystem structure, an
entry point for a function to combine two encryption keys to generate a new
key.
It would be nice to be able to do this in the krb layer, but (1) DES keys
don't preserve parity under XORing with each other and (2) some cryptosystems
may have better ways to combine keys than XOR (but not likely).
[combining keys is useful when a client & server are negotating a sub-session
key.]
