Camellia-CCM and defaults

Sam Hartman hartmans at MIT.EDU
Tue Aug 10 15:54:37 EDT 2010


I'd probably prefer yes and no.

Adding something to the supported enctype list can have interop issues
for servers if the server ends up not supporting the enctype.
RC4 was valuable because  Windows prior to Vista supported RC4 and DES
but nothing else.

I think it is reasonable for reals that want Camellia-CCM to turn it on
at the KDC level.

--Sam



More information about the krbdev mailing list