enctype of TGS key

Tom Yu tlyu at MIT.EDU
Wed Jan 4 19:07:08 EST 2012


Frank Cusack <frank at linetwo.net> writes:

> Oh wait.  As always, just after sending the email is when you find the
> answer.
>
> I think the answer is that the enc-part isn't just an opaque blob, it's
>
>   etype
>   kvno
>   cipher
>
> So that's where the enctype comes from.  Can someone confirm my
> understanding?

Correct.  EncryptedData has the enctype (and possibly kvno) in the
clear, in addition to the ciphertext.


More information about the Kerberos mailing list