1. Forum
  2. Usenet
  3. COMP.PROTOCOLS.KERBEROS

  • Retiring Triple-DES

    From Greg Hudson@21:1/5 to Dan Mahoney (Gushi) on Tue May 18 01:04:53 2021
    To: kerberos@mit.edu

    On 5/18/21 12:38 AM, Dan Mahoney (Gushi) wrote:
    Are there any plans to make a similar page regarding triple-des? (We're undergoing this at the day job, after having 3des as our single allowed enctype). It would be useful to hae a current checklist.

    See:

    http://web.mit.edu/kerberos/krb5-latest/doc/admin/enctypes.html#migrating-away-from-older-encryption-types

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Dan Mahoney (Gushi)@21:1/5 to All on Mon May 17 21:38:32 2021
    All,

    This is an old article about the retirement of single-DES

    https://web.mit.edu/kerberos/krb5-1.12/doc/admin/advanced/retiring-des.html

    The advice there is *mostly* applicable for the retirement of triple-des
    as well.

    Are there any plans to make a similar page regarding triple-des? (We're undergoing this at the day job, after having 3des as our single allowed enctype). It would be useful to hae a current checklist.

    -Dan

    --

    --------Dan Mahoney--------
    Techie, Sysadmin, WebGeek
    Gushi on efnet/undernet IRC
    FB: fb.com/DanielMahoneyIV
    LI: linkedin.com/in/gushi
    Site: http://www.gushi.org
    ---------------------------

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)