RFC 4556: Public Key Cryptography for Initial Authentication in Kerberos (PKINIT)

This document describes protocol extensions (hereafter called PKINIT) to the Kerberos protocol specification. These extensions provide a method for…

Read RFC 4556 on the RFC Editor

Outgoing relationships (17 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 4086: Randomness Requirements for Security
Normative reference — RFC 3280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 3447: Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1
Normative reference — RFC 3852: Cryptographic Message Syntax (CMS)
Normative reference — RFC 4120: The Kerberos Network Authentication Service (V5)
Normative reference — RFC 3279: Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 2631: Diffie-Hellman Key Agreement Method
Normative reference — RFC 3370: Cryptographic Message Syntax (CMS) Algorithms
Normative reference — RFC 3526: More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)
Normative reference — RFC 3766: Determining Strengths For Public Keys Used For Exchanging Symmetric Keys
Normative reference — RFC 3961: Encryption and Checksum Specifications for Kerberos 5
Normative reference — RFC 2412: The OAKLEY Key Determination Protocol
Normative reference — RFC 3560: Use of the RSAES-OAEP Key Transport Algorithm in Cryptographic Message Syntax (CMS)
Normative reference — RFC 3962: Advanced Encryption Standard (AES) Encryption for Kerberos 5
Informative reference — RFC 4121: The Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Mechanism: Version 2
Informative reference — RFC 4158: Internet X.509 Public Key Infrastructure: Certification Path Building

Incoming relationships (12 related RFCs)

Updated by, Normatively referenced by — RFC 6112: Anonymity Support for Kerberos
Updated by, Normatively referenced by — RFC 8062: Anonymity Support for Kerberos
Updated by — RFC 8636: Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Algorithm Agility
Normatively referenced by — RFC 5349: Elliptic Curve Cryptography (ECC) Support for Public Key Cryptography for Initial Authentication in Kerberos (PKINIT)
Normatively referenced by — RFC 6560: One-Time Password (OTP) Pre-Authentication
Normatively referenced by — RFC 8070: Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Freshness Extension
Informatively referenced by — RFC 4949: Internet Security Glossary, Version 2
Informatively referenced by — RFC 6281: Understanding Apple's Back to My Mac (BTMM) Service
Informatively referenced by — RFC 6680: Generic Security Service Application Programming Interface (GSS-API) Naming Extensions
Informatively referenced by — RFC 6717: kx509 Kerberized Certificate Issuance Protocol in Use in 2012
Informatively referenced by — RFC 6806: Kerberos Principal Name Canonicalization and Cross-Realm Referrals
Informatively referenced by — RFC 8009: AES Encryption with HMAC-SHA2 for Kerberos 5