[19335] in Kerberos_V5_Development
RE: supportedKDFs in AuthPack not defined in RFC4556
daemon@ATHENA.MIT.EDU (Li, Jiajia)
Fri Dec 25 01:45:54 2015
From: "Li, Jiajia" <jiajia.li@intel.com>
To: Benjamin Kaduk <kaduk@mit.edu>
Date: Fri, 25 Dec 2015 06:45:37 +0000
Message-ID: <9037BCED616A964EB486B12FCA9DCFCF027B8D64@shsmsx102.ccr.corp.intel.com>
In-Reply-To: <alpine.GSO.1.10.1512250137490.26829@multics.mit.edu>
Content-Language: en-US
MIME-Version: 1.0
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Hi Ben,
Thanks you can point it out. It really help me.
Jiajia
-----Original Message-----
From: Benjamin Kaduk [mailto:kaduk@MIT.EDU]
Sent: Friday, December 25, 2015 2:38 PM
To: Li, Jiajia
Cc: krbdev@mit.edu
Subject: Re: supportedKDFs in AuthPack not defined in RFC4556
On Fri, 25 Dec 2015, Li, Jiajia wrote:
> Hi all,
>
> In mit source code k5-int-pkinit.h:
> /** AuthPack from RFC 4556*/
> typedef struct _krb5_auth_pack {
> krb5_pk_authenticator pkAuthenticator;
> krb5_subject_pk_info *clientPublicValue; /* Optional */
> krb5_algorithm_identifier **supportedCMSTypes; /* Optional */
> krb5_data clientDHNonce; /* Optional */
> krb5_data **supportedKDFs; /* OIDs of KDFs; OPTIONAL */
> } krb5_auth_pack;
>
> It looks like MIT implementation is not sync with the RFC4556. Anybody know why?
See https://tools.ietf.org/html/draft-ietf-krb-wg-pkinit-alg-agility-07 .
-Ben
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
