rc4-hmac implementation

[Steve Langasek]

On Mon, Nov 11, 2002 at 09:04:57PM +0100, Csigas wrote:

> Is there any way to use stronger/other encryption types than
> des-cbc-crc/des-cbc-md5 with windows 2000 interoperability?
> (For example des3-hmac-sha or rc4-hmac)

> Which algorithm is more secure/stronger?
> (i cant find any docs for this)

> I hope i write to the right email list.

des3-hmac-sha is believed more secure than rc4-hmac, but is not supported
by Windows.  Windows supports rc4-hmac, but MIT Kerberos does not.  To
get strong interoperable crypto, you can use Heimdal, or you might be
able to get someone to add support for rc4-hmac to MIT Kerberos if
funding was available. :)

-- 
Steve Langasek
postmodern programmer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20021111/cc650eaa/attachment.bin