[7313] in Kerberos
Re: US Export Restrictions
daemon@ATHENA.MIT.EDU (Dennis Glatting)
Sun May 19 18:44:13 1996
From: Dennis Glatting <dennisg@plaintalk.bellevue.wa.us>
Date: Sun, 19 May 96 15:34:44 -0700
To: Ted Lemon <mellon@fugue.com>
Cc: rsalz@osf.org (Rich Salz), kerberos@MIT.EDU
Reply-To: dennis.glatting@plaintalk.bellevue.wa.us
Date: Sun, 19 May 1996 10:21:03 -0700
From: Ted Lemon <mellon@fugue.com>
> > Confidentiality is provided in gss_seal().
>
> > CyberSafe created a new QOP and SEAL_ALG and use DES-40
> > for encryption.
>
> These two statements appear to be mutually
> contradictory. Am I missing something here? :')
>
A QOP is passed as a parameter to gss_seal() that
indicates (actually, it is more often a hint) the
encryption algorithm and signature algorithm to be used
to protect the message. SEAL_ALG is a field in the packet
that indicates the encryption algorithm used to encrypt
the message. Similarly, SIGN_ALG, another field in the
packet, indicates the signature algorithm used to sign
the message.
-dpg
