vorlon at netexpress.net
Mon Nov 11 15:20:01 EST 2002
On Mon, Nov 11, 2002 at 09:04:57PM +0100, Csigas wrote:
> Is there any way to use stronger/other encryption types than
> des-cbc-crc/des-cbc-md5 with windows 2000 interoperability?
> (For example des3-hmac-sha or rc4-hmac)
> Which algorithm is more secure/stronger?
> (i cant find any docs for this)
> I hope i write to the right email list.
des3-hmac-sha is believed more secure than rc4-hmac, but is not supported
by Windows. Windows supports rc4-hmac, but MIT Kerberos does not. To
get strong interoperable crypto, you can use Heimdal, or you might be
able to get someone to add support for rc4-hmac to MIT Kerberos if
funding was available. :)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20021111/cc650eaa/attachment.bin
More information about the krbdev