[OpenAFS] scan client version
Jeffrey Hutzelman
jhutz@cmu.edu
Thu, 01 Aug 2013 14:59:54 -0400
On Thu, 2013-08-01 at 12:30 -0400, Jeffrey Altman wrote:
> The rxkad-kdf change does not get rid of 1DES. It simply permits the
> afs cell key to be a non-1DES key. All wire encryption and the actual
> rxkad challenge/response is still performed using 1DES.
Actually, that's not strictly true. Using rxkad-kdf effectively does
eliminate use of DES. As always, wire encryption and challenge/response
are performed using fcrypt, not DES. Not that this should make anyone
feel better...
-- Jeff