[prev in list] [next in list] [prev in thread] [next in thread] 

List:       krb5-bugs
Subject:    [krbdev.mit.edu #5958] kadmin enctype naming for DES is deceptive
From:       "Russ Allbery <rra () stanford ! edu> via RT" <rt-comment () krbdev ! mit ! edu>
Date:       2008-05-01 6:28:25
Message-ID: rt-5958-26529.14.1871849339999 () krbdev ! mit ! edu
[Download RAW message or body]

In the current kadmin, "DES cbc mode with CRC-32, no salt" is in fact
salted with the default v5 salt method, whereas "DES cbc mode with
CRC-32, Version 4" is actually not salted.

I don't think this could be more confusing if it was designed to be as
confusing as possible.  :)

Solving 5014 would help here, but only partly.  The basic problem is
that :normal does not actually mean no salt, but that's how it's
displayed.  Perhaps that string in the kadmin client should be changed
to "default salt" instead?
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
[prev in list] [next in list] [prev in thread] [next in thread]