[19333] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

supportedKDFs in AuthPack not defined in RFC4556

daemon@ATHENA.MIT.EDU (Li, Jiajia)
Fri Dec 25 01:31:02 2015

From: "Li, Jiajia" <jiajia.li@intel.com>
To: "krbdev@mit.edu" <krbdev@mit.edu>
Date: Fri, 25 Dec 2015 06:30:46 +0000
Message-ID: <9037BCED616A964EB486B12FCA9DCFCF027B8D44@shsmsx102.ccr.corp.intel.com>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Hi all,

In mit source code k5-int-pkinit.h:
/** AuthPack from RFC 4556*/
typedef struct _krb5_auth_pack {
    krb5_pk_authenticator       pkAuthenticator;
    krb5_subject_pk_info        *clientPublicValue; /* Optional */
    krb5_algorithm_identifier   **supportedCMSTypes; /* Optional */
    krb5_data                   clientDHNonce; /* Optional */
    krb5_data                   **supportedKDFs; /* OIDs of KDFs; OPTIONAL */
} krb5_auth_pack;

It looks like MIT implementation is not sync with the RFC4556. Anybody know why?

Thanks
Jiajia
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post