Questions tagged [kerberos]
Kerberos is a computer network authentication protocol which allows nodes communicating over a non-secure network to prove their identity to one another in a secure manner.
14
questions
0
votes
1
answer
49
views
Derrive a new key from Trusted Third Party (e.g. Kerberos) session key
Kerberos (and I assume other Trusted Third Party protocols) use (hash) an existing shared secret key to create a session key used for authentication. I read that this authentication secret key can ...
- 3
0
votes
1
answer
335
views
Why are des-cbc-hmac and rc4-hmac-exp considered weak in kerberos?
Kerberos uses des-cbc-hmac (mac and encrypt) and rc4-hmac-exp based on md5 (mac and encrypt I think) in their encryptions.
Those encryptions are considered as weak and should not be used. Why are they ...
- 175
0
votes
1
answer
684
views
What authenticated encryption do kerberos use in windows?
I have learned about the kerberos protocol and seen that the windows version uses a couple of authenticated encryption schemas (like rc4-hmac-md5).
What type of authenticated encryption is it? Is it a:...
- 175
3
votes
0
answers
754
views
Why Kerberos isn't using Diffie-Hellman key exchange?
Kerberos transforms the user password to obtain a secret key, which is also stored in the kerberos database. That way what travels through the network is the derived key, not the password itself, ...
- 181
1
vote
0
answers
329
views
Kerberos Use of SHA-1
A lot of good information on Kerbero's encryption methods discussed here, but I there is a second question that arises. Does use of SHA-1 in the overall algorithm weaken Kerberos? If so, will ...
1
vote
0
answers
109
views
Why isn't Kerberos using temporary keys to avoid dictionary attacks?
In the Kerberos protocol, the user sends his ID, the server (Or ticket granting server) ID and a nonce value. The Key Distribution Center uses a key (I assume symmetrical) derived from the client's ...
- 121
1
vote
0
answers
232
views
Break an encryption made with XOR of a key and a known Nonce
My questions is general, but in my case regards the Kerberos protocol and the communication between the client first message and the KDC.
Is there some problem in encrypting using a: (secret key XOR ...
- 111
1
vote
0
answers
73
views
Known plain-text attack on Kerberos
This is a form of the Kerberos protocol
I have two questions. Why does this protocol give the opportunity of a known plain-text attack because of no authentication of Joe? And how would an attacker ...
- 11
0
votes
1
answer
636
views
Use exported certificate with private key to logon using Kerberos
First I just would like to mention, that my knowledge in windows authentification methods are very limited. So my question:
Is it possible to use custom credential provider in windows to log on, that ...
- 1
2
votes
1
answer
169
views
Protocol that generates keys every 2 minutes using KDC
I am using a Key Distributed Center (KDC) and a key distribution protocol such as Kerberos. In order to limit the amount of ciphertext produced with the same
key, I want to renew the session keys ...
- 311
0
votes
0
answers
675
views
What is the DK function when generating an AES key for Kerberos 5?
I'm trying to understand RFC3962. So far I understood everything, except for the last part: generating the derived key from the PBKDF2 output.
To generate an encryption key from a pass phrase and ...
- 181
1
vote
0
answers
70
views
Hiding the identity of a party within the Kerberos authentication scheme
In the Kerberos authentication protocol, as described here:
would it be safer to replace step (1) with:
$$
A \rightarrow T : A, E_{K_A{_{T}}}(B, N_A)
$$
so that a passive adversary does not know ...
- 281
7
votes
1
answer
30k
views
What does AES256-CTS-HMAC-SHA1-96 mean in relation to Kerberos?
I'm not completely clueless as to what it means, but I'd like to understand it at a higher level.
The highest encryption type used by Active Directory domain controllers for Kerberos authentication ...
- 173
3
votes
2
answers
367
views
What is sent on the initial communication with Kerberos?
When a user wants to communicate with another user (let's say Alice and Bob), what is sent over the network during the initial communication?
Alice uses her Kerberos client and enters her password ...
- 504