Review of Kerberos AEAP API

Love Hörnquist Åstrand lha at kth.se
Tue Dec 2 12:46:20 EST 2008


Hello here is my comments from the initial pass over the document.

Limiting to only on DATA buffer is overly restrictive.

On decryption, the HEADER/TRAILER data should be define to be read  
only as well as the ivec content, ie it should be possible to setup an  
recv'er ivec array and keep reusing it over and over again w/o re-init  
the data.

There should be an option to have a readonly DATA buffer, but I can  
live w/o that for now.

Love





More information about the krbdev mailing list