Title: DES_CBC_CKSUM in SSL and Kerberos.
Hi,
I have a customer with a Kerberos V4 application who is trying to decide if they can substitute their existing Kerberos V4 DES encryption capability with SSL's DES encryption support. When calling DES_CBC_CKSUM() from the Kerberos library
The answer is:
MIT DES
and
OpenSSL DES
use different internal representations of the data. You cannot
replace the MIT DES with OpenSSL DES unless you also recompile MIT
Kerberos 4 to use the OpenSSL DES as well.
Several people have done it in the past but it is not recommended.
]; Greaney, Kevin; Jamison, Alan
Subject: Re: DES_CBC_CKSUM in SSL and Kerberos.
The answer is:
MIT DES
and
OpenSSL DES
use different internal representations of the data. You cannot
replace the MIT DES with OpenSSL DES unless you also recompile MIT
Kerberos 4 to use the OpenSSL DES as well