[OpenAFS-devel] [FYI] Review of http://k5wiki.kerberos.org/wiki/Projects/Disable_DES
ending February 13, 2009
Derrick Brashear
shadow@gmail.com
Thu, 29 Jan 2009 16:58:35 -0500
On Thu, Jan 29, 2009 at 4:53 PM, Dean Anderson <dean@av8.com> wrote:
> Some AFS sites are still using kerberos 4. I don't think removing DES
> from latest Kerb. 5 is going to matter much. I think AFS doesn't just
> take the latest Kerberos code, anyway.
We don't have any kerberos code at all; we have an inboard DES implementation.
There's work in progress on a k5 crypto layer-using version of Rx;
It's just not shipping yet.