How kerberos key distribution protocol prevents replay attack ?

  • 1
    $\begingroup$ users.tkk.fi/u/autikkan/kerberos/… ? $\endgroup$ Apr 25 '11 at 0:41
  • 1
    $\begingroup$ should this be closed ? I don't know enough about the underlying topic to figure if it's out of scope or not. $\endgroup$ Apr 25 '11 at 20:11
  • $\begingroup$ (Possible places to consider from reposting it if it gets closed here are: Math.SE and Security.SE) $\endgroup$
    – Kaveh
    Apr 26 '11 at 2:30
  • 1
    $\begingroup$ In principle: By including a time-stamp in the initial encrypted message and requiring that the first response includes that time-stamp incremented by one (verifying that the client was able to decrypt the message). This assumes that clocks are kept fairly well synchronised, which is not valid for modern globally distributed systems. $\endgroup$ Apr 29 '11 at 13:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.