Re: KerberosTime

2003-11-07 Thread Gustavo Rios
[EMAIL PROTECTED] (Ken Hornstein) wrote in message news:<[EMAIL PROTECTED]>... > >> Because it's very likely most of us will still be around by the time > >> the year 2038 rolls around. :-) > > > >ASN allows you to use up to 127 octet for representing integer, so > >using integer would not be a pr

Re: GSS Server without secret key?

2003-11-06 Thread Gustavo Rios
Oliver Schoett <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>... > I have been playing with the Sun GSS/Kerberos sample code in > > http://java.sun.com/j2se/1.4.2/docs/guide/security/jgss/tutorials/ClientServer.html > > and noticed that the client in this scenario needs only a Kerb

Re: KerberosTime

2003-11-06 Thread Gustavo Rios
[EMAIL PROTECTED] (Ken Hornstein) wrote in message news:<[EMAIL PROTECTED]>... > > Kerberos uses GeneralizedTime to communicate between the peers. > > > >My question is: Why? > > > >In my view (again my view) using integer to communicate the seconds > >elapsed since 01/01/1970 is much easier to

ASN encoding

2003-10-31 Thread Gustavo Rios
Dear gentleman/madam, i am studing kerberosV (RFC1510) protocol specification. Some data types for communication are specified as GeneralString encoding. Then i started studying ASN. It came to surprise my that, not only the sources of documentation advice against the usage of GeneralString as als

Re: Simple question on multiple mac/encryption algorithm

2003-10-19 Thread Gustavo Rios
[EMAIL PROTECTED] (Sam Hartman) wrote in message news:<[EMAIL PROTECTED]>... > Kerberos does use a modular approach to encryption; the MIt > implementation of Kerberos supports des, 3des, rc4 and AES at current > writing. > > There is also a modular approach for checksums that are used. > > Howev

Simple question on multiple mac/encryption algorithm

2003-09-16 Thread Gustavo Rios
Hi folks, could some one confirm the following two assertives: 1) KerberosV uses a modular approach, allowing any encryption algorithm to be used stead of DES, i.e., ones could implement RC2/RC4/RC5/cast128/cast256 and any other to be used within kerberosV clients/server. 2) This same modular ap