![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
A thought occured to me that draft-hoffman-des40 may be useful in an IETF standard. It may be a good idea to revise the Kerberos V5 specification to state that keys conforming to draft-hoffman-des40 MUST NOT be used in the des-* enctypes, just like keys which are "weak" or "semiweak" per the DES specification shall not be used. That way, a host with a policy of using 56 bits will not be fooled into communicating with an implementation with an incompatible policy.
Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.