krb5-1.18.2 is released

2020-05-22 Thread Greg Hudson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 The MIT Kerberos Team announces the availability of MIT Kerberos 5 Release 1.18.2. Please see below for a list of some major changes included, or consult the README file in the source tree for a more detailed list of significant changes. RETRIEVING

Password Encryption

2020-05-22 Thread Joshua Brodie
Hi there: How can I find out the out of the box default password encryption used? On a getprinc -- there are 8 shown -- are these all used for the principal? Number of keys: 8 Key: vno 8, aes256-cts-hmac-sha1-96 Key: vno 8, aes128-cts-hmac-sha1-96 Key: vno 8, des3-cbc-sha1 Key: vno 8, arcfour-hm

Re: Password Encryption

2020-05-22 Thread Greg Hudson
On 5/22/20 2:29 PM, Joshua Brodie wrote: > How can I find out the out of the box default password encryption used? Kerberos doesn't encrypt passwords(*), but it does store long-term keys derived from the passwords. This derivation, called the "string-to-key" operation for the encryption type, is