On Thu, 2013-08-01 at 12:30 -0400, Jeffrey Altman wrote:
> The rxkad-kdf change does not get rid of 1DES. It simply permits the > afs cell key to be a non-1DES key. All wire encryption and the actual > rxkad challenge/response is still performed using 1DES. Actually, that's not strictly true. Using rxkad-kdf effectively does eliminate use of DES. As always, wire encryption and challenge/response are performed using fcrypt, not DES. Not that this should make anyone feel better... -- Jeff _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
