[krbdev.mit.edu #5425] nonce needs to be random

Sam Hartman via RT rt-comment at krbdev.mit.edu
Thu Feb 1 07:17:42 EST 2007



RFC 4120 requires that the nonce be random.  Our implementation uses
the current time.  We should fix this both in the TGS and AS code.

--Sam





More information about the krb5-bugs mailing list