I'm calling krb5_k_encrypt with a random key that I'm going to use for miscellaneous stuff. I assume I want to use KRB5_KEYUSAGE_APP_DATA_ENCRYPT? I don't see much documentation on this, but it looks like the most obviously named one. Most of the enctypes don't seem to use the usage at all... Chris