Re: [Ietf-krb-wg] Camellia-CTS for Kerberos

[Love Hörnquist Åstrand <[e-mail]>]

Satoru,

   To generate an encryption key from a pass phrase and salt string, the
   Camellia uses the PBKDF2 function from PKCS #5 v2.0 [RFC2898].  This
   function of Camellia can define as same specification of AES
   [RFC3962]

   The pseudorandom function used by PBKDF2 will be a SHA-1 HMAC of the
   passphrase and salt.  The case of AES described in Appendix B of
   [RFC3962].  For pseudorandom function, Camellia can use like an AES.

The second sentence is not very clear, and can partly be dropped.

I assume you are using PBKDF2-HMAC-SHA1, using the same way as used in AES.

The pseudeo-random function (PRF) is the same as AES, except that camelia is used instead of AES.

I'm not going to worry about that AES and camellia uses the the same key, maybe its a feature ?

Love



18 feb 2010 kl. 03:45 skrev Satoru Kanno:

> Dear Kerberos-WG,
> 
> This draft is a collaborative effort between NTT and the MIT-KC
> to address the use of Kerberos with the Camellia cipher using CTS mode.
> A forthcoming separate draft will address the use of Camellia in GCM mode.
> 
> We request a time-slot for presenting this work at the coming IETF-77 in
> March 2010.
> 
> This draft appears with the following URL.
> URL: http://www.ietf.org/id/draft-krb-wg-kanno-camellia-00.txt
> 
> Best regards,
> 
> -- 
> Satoru Kanno
> 
> Security Business Unit
> Mobile and Security Solution Business Group
> NTT Software Corporation
> 
> e-mail: [e-mail]
> 
> _______________________________________________
> ietf-krb-wg mailing list
> [e-mail]
> https://lists.anl.gov/mailman/listinfo/ietf-krb-wg

_______________________________________________
ietf-krb-wg mailing list
[e-mail]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg