NODE 2f37cf5aRe: kerberosV telnet
Jef Poskanzer <jef@ee.lbl.gov>Fri, 23 Sep 94 17:49:29 PDT
>> Anyone have any fun diffs for kerberized telnet/telnetd that I could
>> play with? An IDEA encryption module? A Diffie-Hellman module?
>> Standards not necessary, we're just experimenting here.
>
>The Cygnus release of Kerberos v4 contains much of what you want. The
>4.4 BSD version of Telnet also contains much of what you want.
"That turns out not to be the case." The version of CNS that we have
doesn't have any encryption beyond DES. 4.4BSD telnet is basically
identical to kerberosV telnet, and the only encryption it has is DES.
You may have misunderstood my message, assuming I was looking for
patches to some random unspecified version of telnet to make it
kerberized and give it IDEA and DH capabilities. That would have
been a stupid request to make. Thanks for the compliment.
Let me be crystal clear this time. We have kerberosV telnet.
It has DES encryption, and a few authentication options that
do not include Diffie-Hellman. I am curious whether anyone has
already started playing with adding new encryption and authentication
modules, for example IDEA and DH.
---
Jef
NODE 344a58adRe: kerberosV telnet
"Perry E. Metzger" <perry@imsi.com>Sat, 24 Sep 94 11:49:31 PDT
Jef Poskanzer says:
> "That turns out not to be the case." The version of CNS that we have
> doesn't have any encryption beyond DES. 4.4BSD telnet is basically
> identical to kerberosV telnet, and the only encryption it has is DES.
The 4.4 telnet is NOT identical. Its much better code, has lots of
neat new capabilities that you probably want, is more modular, and the
versions I saw had hooks for D-H and the like, which is where most of
the work is -- you can get the D-H code from RSAREF and steal the IDEA
code from PGP; from there the changes are small. And yes, I assumed
that you didn't have an encrypted telnet at all. It would not have
been a stupid assumption to make because this request occurs on
Cypherpunks at four month intervals.
Perry