rfc-8009

AES Encryption with HMAC-SHA2 for Kerberos 5

M. Jenkins, M. Peck, K. Burgin

date2016-10 streamIETF areasec wgkitten statusINFORMATIONAL pages19 canonicalhttps://www.rfc-editor.org/rfc/rfc8009 doi10.17487/RFC8009

This document specifies two encryption types and two corresponding checksum types for Kerberos 5. The new types use AES in CTS mode (CBC mode with ciphertext stealing) for confidentiality and HMAC with a SHA-2 hash for integrity.