des3_cbc_md5

naveen.bn naveen.bn at globaledgesoft.com
Wed Jul 16 07:48:21 EDT 2008


Hi Kevin ,

I added the support for des3_cbc_md5 in lib/crypto/etypes.c
const struct krb5_keytypes krb5_enctypes_list[] = {
 { ENCTYPE_DES3_CBC_MD5,
      "des3-cbc-md5", "Triple DES cbc mode with md5",
      &krb5int_enc_des3,&krb5int_hash_md5,
      krb5_dk_encrypt_length, krb5_dk_encrypt, krb5_dk_decrypt,
      krb5int_dk_string_to_key,
      krb5int_dk_prf,
      CKSUMTYPE_RSA_MD5_DES3 }
 
and provided an entry in the  DEFAULT_ETYPE_LIST lib/krb5/krb/init_ctx.c  
#define DEFAULT_ETYPE_LIST	\
	"aes256-cts-hmac-sha1-96 " \
	"aes128-cts-hmac-sha1-96 " \
	"des3-cbc-sha1 arcfour-hmac-md5 " \
	"des-cbc-crc des-cbc-md5 des-cbc-md4 " \
  	"des3-cbc-md5 " 

but the kdc replays with a error message saying CANT_FIND_CLIENT_KEY. I want the kdc to use the generated
key using DH parameters passed in the AS_REQ.

kindly help me out in solving this problem.
Thank you

with regards
naveen





More information about the Kerberos mailing list