etype specs for des3 implementation

Kiran Kumar mkiran at india.hp.com
Tue Nov 2 00:26:52 EST 2004


Hi,

Posting this to krbdev, as I did not get any response from krbcore.

I have a copy of MIT Kerberos 1.3.5, the krb5.h in this distribution 
defines the following etypes:

#define ENCTYPE_DES3_CBC_SHA    0x0005  /* DES-3 cbc mode with NIST-SHA */
#define ENCTYPE_DES_HMAC_SHA1   0x0008
#define ENCTYPE_DES3_CBC_SHA1   0x0010

These etype definitions are different from  the crypto spec for Kerberos 
[ http://www.ietf.org/internet-drafts/draft-ietf-krb-wg-crypto-07.txt ]

des3-cbc-md5                       5
des3-cbc-sha1                      7

Aren't these two out of sync ?
Can anyone here let me know if there is a plan to fix this issue ?

Thanks,
Kiran




More information about the krbdev mailing list