[978] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: So, why shouldn't appl/bsd use tripple-DES

daemon@ATHENA.MIT.EDU (Richard Basch)
Fri Jan 26 06:12:13 1996

Date: Fri, 26 Jan 1996 06:11:11 -0500
To: "Richard Basch" <basch@lehman.com>
Cc: Sam Hartman <hartmans@MIT.EDU>, krbdev@MIT.EDU
In-Reply-To: <199601261043.FAA13189@badger.lehman.com>
From: "Richard Basch" <basch@lehman.com>

I take that back...

Apparently the code was changed at some point, and I forgot about the
change.  It looks like rlogin/rsh can now use any encryption system, so
the removal of the setting of tgs_enctypes is ok in the appl/bsd suite.

On Fri, 26-January-1996, "Richard Basch" wrote to "Sam Hartman, krbdev@MIT.EDU" saying:

> The session key that should be requested should be DES not 3-DES;
> admittedly, the change need not be in kcmd.c, but the encryption
> functionality of rsh/rlogin will only handle DES, not 3-DES.
> 
> Admittedly, telnet, in its current state also has this restriction, and
> I forgot to change that, but I also had plans to properly support 3-DES
> soon in telnet.
-- 
Richard Basch                   
Sr. Developer/Analyst           URL: http://web.mit.edu/basch/www/home.html
Lehman Brothers, Inc.           Email: basch@lehman.com, basch@mit.edu
101 Hudson St., 33rd Floor      Fax:   +1-201-524-5828
Jersey City, NJ 07302-3988      Voice: +1-201-524-5049


home help back first fref pref prev next nref lref last post