rc4-hmac implementation

Steve Langasek vorlon at netexpress.net
Mon Nov 11 15:20:01 EST 2002

On Mon, Nov 11, 2002 at 09:04:57PM +0100, Csigas wrote:

> Is there any way to use stronger/other encryption types than
> des-cbc-crc/des-cbc-md5 with windows 2000 interoperability?
> (For example des3-hmac-sha or rc4-hmac)

> Which algorithm is more secure/stronger?
> (i cant find any docs for this)

> I hope i write to the right email list.

des3-hmac-sha is believed more secure than rc4-hmac, but is not supported
by Windows.  Windows supports rc4-hmac, but MIT Kerberos does not.  To
get strong interoperable crypto, you can use Heimdal, or you might be
able to get someone to add support for rc4-hmac to MIT Kerberos if
funding was available. :)

Steve Langasek
postmodern programmer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20021111/cc650eaa/attachment.bin

More information about the krbdev mailing list