[OpenAFS] scan client version

Jeffrey Hutzelman jhutz@cmu.edu
Thu, 01 Aug 2013 14:59:54 -0400


On Thu, 2013-08-01 at 12:30 -0400, Jeffrey Altman wrote:


> The rxkad-kdf change does not get rid of 1DES.  It simply permits the
> afs cell key to be a non-1DES key.  All wire encryption and the actual
> rxkad challenge/response is still performed using 1DES.

Actually, that's not strictly true.  Using rxkad-kdf effectively does
eliminate use of DES.  As always, wire encryption and challenge/response
are performed using fcrypt, not DES.  Not that this should make anyone
feel better...

-- Jeff