Re: [Pfif] [cifs-protocol] Clarify AEAD behaviour for GSSAPI with AES

2008-08-08 Thread Stefan (metze) Metzmacher
Hongwei, The encryption function in Kerberos is described in details in 5.3 [RFC3961] (http://www.ietf.org/rfc/rfc3961.txt), which is referenced by [MS-KILE]. I can summarize as follows * conf is actually a random confounder prefix of length c ,such as 16. *

RE: [cifs-protocol] Session keys are not always 16 bytes long

2008-08-08 Thread Hongwei Sun
Stefan, I just found that the session key used to decrypt the password attributes in the DsGetNCChanges() is not truncated. Do you have network trace for this case ? And I need to use gsskrb5_get_subkey() instead of gsskrb5_get_initiator_subkey(), when aes keys are used. Does this happen

[cifs-protocol] Re: Regarding String2key for random trust keys ([MS-ADTS] 7.1.6.8.1.2)

2008-08-08 Thread Andrew Bartlett
On Fri, 2008-08-08 at 08:48 -0700, John Dunning wrote: Hello Andrew, I received feedback from our Product team and they have some questions to help in clarification. Your original question: “In MS-ADTS 7.1.6.8.1.2, it states: This flag indicates that the