Subject: Re: CIFS and the krb5 PRF

From: Ken Raeburn <[email-masked]>
Date: Fri, 1 Jul 2005 01:58:32 -0400

On Jun 27, 2005, at 05:11, Andrew Bartlett wrote:
> The 'CIFS Session key' export is just one of these required extensions 
> -
> we also need to change the GSS_Wrap arguments to support AEAD, and
> closer control over the underlying Kerberos behaviour.

Hm, AEAD is needed for Samba?  Wish I'd know that a year ago; it 
might've tipped the balance in favor of getting some sort of AEAD into 
RFC 3961.  Can you point me to some additional info on this?

I don't think we can change GSS_Wrap to support AEAD without making it 
incompatible with previous specs.  A new function would probably be 
needed.

Ken

_______________________________________________
Kitten mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/kitten