| |
| | The Moron's Guide to Kerberos |
 | | The key innovation underlying Kerberos (and its predecessors) is the notion that the password can be viewed as a special case of a shared secret--something that the user and the service hold in common, and which (again ideally) only they know. |
 | | Kerberos, by default, does not use public-key cryptography, but there is an Internet-Draft (soon to be RFC), which I co-authored, that adds public-key cryptography to the initial authentication phase; I'll say more about this in a bit. |
 | | In Kerberos parlance, the former message is often called the user's credentials, the latter message is called the ticket, and the random key is called the session key. |
| www.isi.edu /~brian/security/kerberos.html (3226 words) |
|