[19604] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

aes-sha2 in default etype list now?

daemon@ATHENA.MIT.EDU (Weijun Wang)
Wed Jun 21 11:11:41 2017

To: krbdev@mit.edu
From: Weijun Wang <weijun.wang@oracle.com>
Message-ID: <d5696c71-bd4d-b250-2894-672aee4ef1d0@oracle.com>
Date: Wed, 21 Jun 2017 23:11:20 +0800
MIME-Version: 1.0
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

According to the source at 
https://github.com/krb5/krb5/blob/master/src/lib/krb5/krb/init_ctx.c#L63:

static krb5_enctype default_enctype_list[] = {
     ENCTYPE_AES256_CTS_HMAC_SHA1_96, ENCTYPE_AES128_CTS_HMAC_SHA1_96,
     ENCTYPE_AES256_CTS_HMAC_SHA384_192, ENCTYPE_AES128_CTS_HMAC_SHA256_128,
     ENCTYPE_DES3_CBC_SHA1,
     ENCTYPE_ARCFOUR_HMAC,
     ENCTYPE_CAMELLIA128_CTS_CMAC, ENCTYPE_CAMELLIA256_CTS_CMAC,
     ENCTYPE_DES_CBC_CRC, ENCTYPE_DES_CBC_MD5, ENCTYPE_DES_CBC_MD4,
     0
};

But the doc at https://github.com/krb5/krb5/blob/master/doc/conf.py#L275 
shows:

.. |defetypes| replace:: ``aes256-cts-hmac-sha1-96 
aes128-cts-hmac-sha1-96 des3-cbc-sha1 arcfour-hmac-md5 
camellia256-cts-cmac camellia128-cts-cmac des-cbc-crc des-cbc-md5 
des-cbc-md4``

Are aes128-sha2 and aes256-sha2 default etypes?

Is doc behind src?

Thanks
Max
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post