[OpenAFS] krb4 3des vulnerability

Russ Allbery rra@stanford.edu
Mon, 17 Mar 2003 14:03:52 -0800


Derek Atkins <warlord@MIT.EDU> writes:

> You are still vulnerable, but only to those people who know the keys to
> "long" principals.

Only one, or do they have to know more than one?  (And is there any
quantifier on "long"?)

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>