Session key extraction

[Luke Howard]

On 24/12/2008, at 1:16 PM, Nicolas Williams wrote:

> On Wed, Dec 24, 2008 at 11:46:20AM +1100, Luke Howard wrote:
>> I changed it to the following:
>>
>> * Provisionally reserved for Kerberos session key algorithm
>> * identifiers is:
>> *      iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
>> *      krb5(2) krb5_enctype(4) = 1.2.840.113554.1.2.2.4
>> * Provisionally reserved for Kerberos mechanism-specific APIs:
>> *      iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
>> *      krb5(2) krb5_gssapi_ext(5) = 1.2.840.113554.1.2.2.5
>>
>> (Recall 1.2.840.113554.1.2.2.3 is used by Microsoft's user-to-user
>> mechanism.)
>
> Danger...

Meaning?

-- Luke