IETF Logo Mail Archive

[Ietf-krb-wg] CF2 test vectors for DES and 3DES

Sam Hartman <hartmans-ietf@mit.edu> Thu, 30 April 2009 20:30 UTC

Return-Path: <ietf-krb-wg-bounces@lists.anl.gov>
X-Original-To: ietfarch-krb-wg-archive@core3.amsl.com
Delivered-To: ietfarch-krb-wg-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D89583A680E for <ietfarch-krb-wg-archive@core3.amsl.com>; Thu, 30 Apr 2009 13:30:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.443
X-Spam-Level:
X-Spam-Status: No, score=-2.443 tagged_above=-999 required=5 tests=[AWL=0.156, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vQEOdKc9qcsY for <ietfarch-krb-wg-archive@core3.amsl.com>; Thu, 30 Apr 2009 13:30:13 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by core3.amsl.com (Postfix) with ESMTP id D97873A67F7 for <krb-wg-archive@lists.ietf.org>; Thu, 30 Apr 2009 13:30:12 -0700 (PDT)
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.ctd.anl.gov (Postfix) with ESMTP id 1AE443B; Thu, 30 Apr 2009 15:31:36 -0500 (CDT)
Received: from lists.anl.gov (katydid.it.anl.gov [146.137.96.32]) by mailhost.anl.gov (Postfix) with ESMTP id E061211; Thu, 30 Apr 2009 15:31:35 -0500 (CDT)
Received: from katydid.it.anl.gov (localhost [127.0.0.1]) by lists.anl.gov (Postfix) with ESMTP id C95CE80DFD; Thu, 30 Apr 2009 15:31:35 -0500 (CDT)
X-Original-To: ietf-krb-wg@lists.anl.gov
Delivered-To: ietf-krb-wg@lists.anl.gov
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by lists.anl.gov (Postfix) with ESMTP id 48D8280DF1 for <ietf-krb-wg@lists.anl.gov>; Thu, 30 Apr 2009 15:31:34 -0500 (CDT)
Received: by mailhost.anl.gov (Postfix) id 437F3D; Thu, 30 Apr 2009 15:31:34 -0500 (CDT)
Delivered-To: ietf-krb-wg@anl.gov
Received: from mailhost.anl.gov (mailhost.anl.gov [130.202.113.50]) by localhost.ctd.anl.gov (Postfix) with ESMTP id 3ED7711 for <ietf-krb-wg@anl.gov>; Thu, 30 Apr 2009 15:31:34 -0500 (CDT)
Received: from mailrelay.anl.gov (mailrelay.anl.gov [130.202.101.22]) by mailhost.anl.gov (Postfix) with ESMTP id 39E88D for <ietf-krb-wg@anl.gov>; Thu, 30 Apr 2009 15:31:34 -0500 (CDT)
Received: from localhost (localhost [127.0.0.1]) by localhost.it.anl.gov (Postfix) with ESMTP id 226847CC08E; Thu, 30 Apr 2009 15:31:34 -0500 (CDT)
Received: from mailrelay.anl.gov ([127.0.0.1]) by localhost (mailrelay.anl.gov [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 20427-07; Thu, 30 Apr 2009 15:31:34 -0500 (CDT)
Received: from mailgateway.anl.gov (mailgateway.anl.gov [130.202.101.28]) by mailrelay2.anl.gov (Postfix) with ESMTP id 00D0D7CC08D for <ietf-krb-wg@anl.gov>; Thu, 30 Apr 2009 15:31:33 -0500 (CDT)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: ApoEACen+UlFGcSy/2dsb2JhbADAeYdeiE2DfwU
X-IronPort-AV: E=Sophos;i="4.40,275,1238994000"; d="scan'208";a="26524593"
Received: from carter-zimmerman.suchdamage.org ([69.25.196.178]) by mailgateway.anl.gov with ESMTP; 30 Apr 2009 15:31:33 -0500
Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 1018A415B; Thu, 30 Apr 2009 16:31:31 -0400 (EDT)
To: lha@apple.com, ietf-krb-wg@anl.gov
From: Sam Hartman <hartmans-ietf@mit.edu>
Date: Thu, 30 Apr 2009 16:31:31 -0400
Message-ID: <tsl63gl7ujg.fsf@mit.edu>
User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux)
MIME-Version: 1.0
X-Virus-Scanned: Debian amavisd-new at frigga.it.anl.gov
Subject: [Ietf-krb-wg] CF2 test vectors for DES and 3DES
X-BeenThere: ietf-krb-wg@lists.anl.gov
X-Mailman-Version: 2.1.11
Precedence: list
List-Id: "This is a list for the IETF Kerberos Working Group. {WORLDPUB, EXTERNAL}" <ietf-krb-wg.lists.anl.gov>
List-Unsubscribe: <https://lists.anl.gov/mailman/options/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=unsubscribe>
List-Archive: <https://lists.anl.gov/pipermail/ietf-krb-wg>
List-Post: <mailto:ietf-krb-wg@lists.anl.gov>
List-Help: <mailto:ietf-krb-wg-request@lists.anl.gov?subject=help>
List-Subscribe: <https://lists.anl.gov/mailman/listinfo/ietf-krb-wg>, <mailto:ietf-krb-wg-request@lists.anl.gov?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ietf-krb-wg-bounces@lists.anl.gov
Errors-To: ietf-krb-wg-bounces@lists.anl.gov

Folks, there seems to be yet another inconsistency between RFC 3961
and MIT regarding DES and presumably 3DES random2key operations.

MIT assumes that DES random bit strings are 7 byte strings that are
expanded with parity bits.  The RFC 3961 spec assumes that you take an
eight byte string and do parity fix-up.

I suspec Heimdal does the same thing as MIT here because we seem to
interoperate for PKINIT and this issue comes up there too.

This is also a big issue for CF2.  Attached are DES and 3DES results
for KRB-FX-CF2.  In both cases key1 is string_to_key("key1", "key1",
default_params) and key2 is string_to_key("key2","key2",
default_params).  The pepper1 is a; the pepper2 is b.

des: 43bae3738c9467e6
des3: e58f9eb643862c13ad38e529313462a7f73e62834fe54a01

Note that both of those are protocol keys--they have already been
expanded and parity fixed.

I'd definitely appreciate confirmation of these test vectors from
people.  If you run into trouble, I can provide the PRF inputs that
are used.
_______________________________________________
ietf-krb-wg mailing list
ietf-krb-wg@lists.anl.gov
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg

v2.23.0 | Report a Bug | By Email