Session key extraction

[Nicolas Williams]

On Wed, Dec 24, 2008 at 11:46:20AM +1100, Luke Howard wrote:
> I changed it to the following:
> 
>  * Provisionally reserved for Kerberos session key algorithm
>  * identifiers is:
>  *      iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
>  *      krb5(2) krb5_enctype(4) = 1.2.840.113554.1.2.2.4
>  * Provisionally reserved for Kerberos mechanism-specific APIs:
>  *      iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
>  *      krb5(2) krb5_gssapi_ext(5) = 1.2.840.113554.1.2.2.5
> 
> (Recall 1.2.840.113554.1.2.2.3 is used by Microsoft's user-to-user  
> mechanism.)

Danger...