To: kerberos@mit.edu

On 5/18/21 12:38 AM, Dan Mahoney (Gushi) wrote:

Are there any plans to make a similar page regarding triple-des? (We're undergoing this at the day job, after having 3des as our single allowed enctype). It would be useful to hae a current checklist.

See:

http://web.mit.edu/kerberos/krb5-latest/doc/admin/enctypes.html#migrating-away-from-older-encryption-types

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

All,

This is an old article about the retirement of single-DES

https://web.mit.edu/kerberos/krb5-1.12/doc/admin/advanced/retiring-des.html

The advice there is *mostly* applicable for the retirement of triple-des
as well.

Are there any plans to make a similar page regarding triple-des? (We're undergoing this at the day job, after having 3des as our single allowed enctype). It would be useful to hae a current checklist.

-Dan

--

--------Dan Mahoney--------
Techie, Sysadmin, WebGeek
Gushi on efnet/undernet IRC
FB: fb.com/DanielMahoneyIV
LI: linkedin.com/in/gushi
Site: http://www.gushi.org
---------------------------

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)