[OpenAFS-devel] [FYI] Review of http://k5wiki.kerberos.org/wiki/Projects/Disable_DES ending February 13, 2009

Derrick Brashear shadow@gmail.com
Thu, 29 Jan 2009 16:58:35 -0500


On Thu, Jan 29, 2009 at 4:53 PM, Dean Anderson <dean@av8.com> wrote:
> Some AFS sites are still using kerberos 4.  I don't think removing DES
> from latest Kerb. 5 is going to matter much.  I think AFS doesn't just
> take the latest Kerberos code, anyway.

We don't have any kerberos code at all; we have an inboard DES implementation.

There's work in progress on a k5 crypto layer-using version of Rx;
It's just not shipping yet.