All, Thanks for all the useful input. I will look into what I can do on the KDCs. Best,
Christian Am 01.08.2013 21:01 schrieb "Jeffrey Hutzelman" <[email protected]>: > On Thu, 2013-08-01 at 12:30 -0400, Jeffrey Altman wrote: > > > > The rxkad-kdf change does not get rid of 1DES. It simply permits the > > afs cell key to be a non-1DES key. All wire encryption and the actual > > rxkad challenge/response is still performed using 1DES. > > Actually, that's not strictly true. Using rxkad-kdf effectively does > eliminate use of DES. As always, wire encryption and challenge/response > are performed using fcrypt, not DES. Not that this should make anyone > feel better... > > -- Jeff > > _______________________________________________ > OpenAFS-info mailing list > [email protected] > https://lists.openafs.org/mailman/listinfo/openafs-info >
