[kitten] Verified authorization data
Simo Sorce
simo at redhat.com
Wed Jun 11 12:17:24 EDT 2014
On Wed, 2014-06-11 at 14:20 +0200, Peter Mogensen wrote:
> The solution in AD-CAMMAC seems very complex too, requiring
> effectively calculating the entire EncTicketPart twice - and once for
> every present AD-CAMMAC present.
I am confused about this statement. The AD-CAMMAC draft specifies that
it contains a sequence of AD elements, that means you have only 1
AD-CAMMAC for all the AD data you want to protect. You check the whole
thing only once.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
More information about the krbdev
mailing list