>>>>> "Jeffrey" == Jeffrey Hutzelman <jhutz at cmu.edu> writes: Jeffrey> I see no reason why a client shouldn't be able to process Jeffrey> padata in any order it wants Certainly my preauth framework draft contemplated incrementally strengthening the reply key as you went through the padata in the order supplied by the KDC. --Sam