https://k5wiki.test.kerberos.org/wiki?action=history&feed=atom&title=Release_Meeting_Minutes%2F2011-05-10 2026-05-14T17:25:38Z Revision history for this page on the wiki MediaWiki 1.27.4 https://k5wiki.test.kerberos.org/wiki?title=Release_Meeting_Minutes/2011-05-10&diff=3850&oldid=prev 2011-05-13T21:51:54Z

<p>New page: {{minutes|2011}} Will Fiveash, Thomas Hardjono, Sam Hartman, Greg Hudson, Zhanna Tsitkova, Tom Yu === Solaris === ;Will: Finished integrating 1.8.3. Big struggle. Not a complete merge. Mi...</p> <p><b>New page</b></p><div>{{minutes|2011}}<br /> Will Fiveash, Thomas Hardjono, Sam Hartman, Greg Hudson, Zhanna Tsitkova, Tom Yu<br /> <br /> === Solaris ===<br /> ;Will: Finished integrating 1.8.3. Big struggle. Not a complete merge. Might have to revisit code organization. Solaris and MIT a little closer now.<br /> <br /> === PKINIT ===<br /> <br /> ;Greg: Hash agility? Two hard dependencies of PKINIT on SHA1. DH KDF for reply key. Agility draft uses NIST KDF. nonces?<br /> ;Sam: Don't want same reply key each time you reuse DH public keys. Idea is to reduce number of crypto ops. [mutual auth in KDC]<br /> ;Greg: [client &amp; KDC nonces] One of Love's inputs is...<br /> ;Sam: Whole ticket<br /> ;Greg: Has implications for KDC side. Would have to split processing (authdata must be collected for creating the ticket).<br /> <br /> ;Sam: [PKINIT precomputation attack]]<br /> ;Greg: PKINIT Otherinfo encoding<br /> ;Sam: Gross hack to not emit tag in ASN.1 encoder.<br /> ;Tom: Problems are in the decoder<br /> ;Sam: Decoder not needed [it's a KDF input].<br /> <br /> Tom will send mail to Tim Polk about KDF ambiguities in SP 800-56A.<br /> <br /> Greg will propose solutions to the WG.<br /> <br /> === Other ===<br /> <br /> ;Thomas: ISO 11770-2? Kerberos reinvented? Anyone heard of it? [No]<br /> <br /> ;Sam: W3C. Identity in the browser. What advice to give application authors re acquiring credentials with password vs without password?<br /> ;Thomas: Interop planning (next week)<br /> <br /> ;Greg: Does IETF draft expiry mean anything now? [Camellia draft administrivia]</div>

TomYu