>>>>> "Mayers," == Mayers, Philip J <[EMAIL PROTECTED]> writes:
Mayers,> I wouldn't worry. It's highly likely that I'll never get
Mayers,> to a release, since I can't seem to figure the
Mayers,> des-cbc-crc enctype out...
Sorry I didn't get around to this earlier, but have been fairly busy
with IETf. I'm amused at the concept of combining des-cbc-crc with
pkinit.
But anyway, have you read the current IETF draft on Kerberos
revisions? IN particular, section 6.5.4 of
draft-ietf-cat-kerberos-revisions? That seems to have a fairly clear
explanation of the encryption system. If you want to generate test
vectors for yourself, you may find a simple program to call the MIT
crypto functions useful. Please see
http://www.meepzorp.org/~hartmans/t_encrypt.c for a test program out
of the current snapshot. It demonstrates encrypting and decrypting
short strings.
