RFC 3961: Encryption and Checksum Specifications for Kerberos 5

This document describes a framework for defining encryption and checksum mechanisms for use with the Kerberos protocol, defining an abstraction layer between…

Read RFC 3961 on the RFC Editor

Incoming relationships (18 related RFCs)

Updated by — RFC 8429: Deprecate Triple-DES (3DES) and RC4 in Kerberos
Normatively referenced by — RFC 4121: The Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Mechanism: Version 2
Normatively referenced by — RFC 4556: Public Key Cryptography for Initial Authentication in Kerberos (PKINIT)
Normatively referenced by — RFC 5802: Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms
Normatively referenced by — RFC 4430: Kerberized Internet Negotiation of Keys (KINK)
Normatively referenced by — RFC 6112: Anonymity Support for Kerberos
Normatively referenced by — RFC 4402: A Pseudo-Random Function (PRF) for the Kerberos V Generic Security Service Application Program Interface (GSS-API) Mechanism
Normatively referenced by — RFC 6560: One-Time Password (OTP) Pre-Authentication
Normatively referenced by — RFC 6649: Deprecate DES, RC4-HMAC-EXP, and Other Weak Cryptographic Algorithms in Kerberos
Normatively referenced by — RFC 4537: Kerberos Cryptosystem Negotiation Extension
Normatively referenced by — RFC 6803: Camellia Encryption for Kerberos 5
Normatively referenced by — RFC 6880: An Information Model for Kerberos Version 5
Normatively referenced by — RFC 8009: AES Encryption with HMAC-SHA2 for Kerberos 5
Normatively referenced by — RFC 8062: Anonymity Support for Kerberos
Normatively referenced by — RFC 9588: Kerberos Simple Password-Authenticated Key Exchange (SPAKE) Pre-authentication
Informatively referenced by — RFC 3962: Advanced Encryption Standard (AES) Encryption for Kerberos 5
Informatively referenced by — RFC 6150: MD4 to Historic Status
Informatively referenced by — RFC 6448: The Unencrypted Form of Kerberos 5 KRB-CRED Message