Path: i2pn2.org!rocksolid2!news.neodome.net!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: nic...@cryptonector.com (Nico Williams)
Newsgroups: comp.protocols.kerberos
Subject: Re: RFC 4121 & acceptor subkey use in MIC token generation
Date: Thu, 26 Oct 2023 13:33:27 -0500
Organization: TNet Consulting
Lines: 10
Message-ID: <mailman.22.1698345217.2263420.kerberos@mit.edu>
References: <202310241950.39OJoa0Z000708@hedwig.cmf.nrl.navy.mil>
<3db2752e-565e-1f64-b354-9031a2fe9334@mit.edu> <ZTiT0ub2uv5A/b4E@ubby21>
<202310251251.39PCpTqc026799@hedwig.cmf.nrl.navy.mil>
<ZTk62q0DIAZmW0eL@ubby21>
<CALF+FNwtDrQ0d+a=zsXyiYq6rhOiXXkqoxUnscwum0Q0wchLJQ@mail.gmail.com>
<202310261741.39QHfgIl030099@hedwig.cmf.nrl.navy.mil>
<ZTqtQYPlzdpQGyr+@ubby21>
<202310261827.39QIRu4Q000307@hedwig.cmf.nrl.navy.mil>
<ZTqw9+Etcwo8SqR4@ubby21>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="23034"; mail-complaints-to="newsmaster@tnetconsulting.net"
Cc: kerberos@mit.edu
To: Ken Hornstein <kenneth.hornstein.ctr@nrl.navy.mil>
DKIM-Filter: OpenDKIM Filter v2.11.0 unknown-host (unknown-jobid)
Authentication-Results: mailman.mit.edu;
dkim=pass (1024-bit key, unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=qvuLn9h7;
dkim=pass (2048-bit key,
unprotected) header.d=cryptonector.com header.i=@cryptonector.com
header.a=rsa-sha256 header.s=dreamhost header.b=qHjAGLBt
Authentication-Results: mit.edu; dmarc=none (p=none dis=none)
header.from=cryptonector.com
Authentication-Results: mit.edu; arc=pass smtp.remote-ip=18.7.73.16
ARC-Seal: i=4; a=rsa-sha256; d=mit.edu; s=arc; t=1698345215; cv=pass;
b=RvBUlbWWqJPh0qqSNl/RxIMXA1hoyab9SIV21StGdlKV0kx2hFyg4sOsrEa/PsSSi5BayfZrKI4+vrH8+8cGoAaDVQgNTfRHyTjd97Ndq2jSPkx0PZo8FQx8JoBgRfmV3jtnl7myiWePsXGPLAzbEA2llApHYty1oXmw3FhRiEZ6kxM/oAcr4zTtIRfyiMFTzT28kH+qBlobh3tZa+F6hSHIV9eMnrzFdsev3etAKlv6j4ZY+Z2QD7OAgKLCoZNhY5dtqrK979VfpVq48DSqR4IsdITM/d8OarAjaN7kR9QSeH7rZfLqcUnP4yjryzHPGWpoLFxM+BapzXfsVrTodg==
ARC-Message-Signature: i=4; a=rsa-sha256; d=mit.edu; s=arc; t=1698345215;
c=relaxed/relaxed; bh=PYIo05JruMamN4whpLJw2LQ8xW6mI8VQfKOj9zyYYsE=;
h=Date:From:Subject:Message-ID:MIME-Version:Content-Type;
b=DROX1Tk5lQPNOZmxIlB/CWDPAfsU+g7yGLqawMQ5tZWxucozDVdfsgXirmgFY4G6447ZtvU4j8HScDj6BpT93UzXBbgcXWNWgS/ZI19qNQ81qvjfGbomMBdUjqAVUesOrkQadbcmNUSdZZR/VQbuXVubjdPuBmQGzvgqkMjmW6QUeLog1Yy6nZ88HDvaggBCrW3mo8qBMwcJEvqYBAAGSCpAhaspG6TWQeKTwfDcHuBUF6ICZsAGCihjkv6hLqaeG/aMZqYA4w+LN69gBLA6z/aj4vX8ZOnzA1e8teKy7TsWvi49tDOwgNPVggcERXSkzV6x9B1yOwGcZA/DkSxvYA==
ARC-Authentication-Results: i=4; mit.edu; dkim=pass (1024-bit key;
unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=qvuLn9h7;
dkim=pass (2048-bit key;
unprotected) header.d=cryptonector.com header.i=@cryptonector.com
header.a=rsa-sha256 header.s=dreamhost header.b=qHjAGLBt
Authentication-Results: mit.edu; dkim=pass (1024-bit key;
unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=qvuLn9h7;
dkim=pass (2048-bit key;
unprotected) header.d=cryptonector.com header.i=@cryptonector.com
header.a=rsa-sha256 header.s=dreamhost header.b=qHjAGLBt
ARC-Seal: i=3; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=MQ4ObR/Bw31YqKwJPXaX75k0ZLfx7NJR4PcInnE6JSYx3Qt4yD7alm74uE9YA5jCm9cUa2HaNNsipn/QaAunQZ3Rvk6aUmFQObByti4gYhBNWHxDpKrTOECF37sjloTGEC0k0SCICAxhmTdwkbE/r6Vm5OkK5OW6glDkCJL+NVtBuDvnixe+oRbYwQumdExWnDB6vMT+S4nHYmBTkY8XpHkzDPd92B6w98yA937CvJlbX8sByGTU13RATnsokHbzjbBjXeJdFemk8mXBiJTCT5gQWhFZeyJObCyO9LYSnVyp+NwB4tWu07piBrQeNSSSjSVNMSrD7wRngJb1wgXgnQ==
ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=PYIo05JruMamN4whpLJw2LQ8xW6mI8VQfKOj9zyYYsE=;
b=ku4/eqzyhUSDnKnspDTecDMKATM2X5yte+FmqsF8rZUyYY9DhOTO9DJmFeObLojDx1Y0l8tlOuWZ/JJ6MAvz4104qA0URF9XBRvHnwZctRAlYTmbyOXyJMEOlqaGOGn8SQgUqArgzaN1SWo85buH3mNxjlA4CRk/ksC/7GOdyNrOL8E6wWJLQrz0KFZXKpvTpd31+yDNIpxj0TUTHalGNrQc3ikyHSiGZqTTJgwRqwhSi9sVvIb8CGelfj4pxpXjLV3cNDyl/NCkQbTKn4gPxcQIOv86dAOIpvTkuQG2mvn8CqJAe6rpQJ/0aOjGEg2C8hf4QIBBhazLHIEWAKZ1Mw==
ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=pass (sender ip is
23.83.209.55) smtp.rcpttodomain=mit.edu smtp.mailfrom=cryptonector.com;
dmarc=bestguesspass action=none header.from=cryptonector.com; dkim=pass
(signature was verified) header.d=cryptonector.com; arc=pass (0 oda=0 ltdi=0
93)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=PYIo05JruMamN4whpLJw2LQ8xW6mI8VQfKOj9zyYYsE=;
b=qvuLn9h7S/6o/bIs77m/yFcDifXgMmwK3nM7xbJo+XedOz2hA87pc+cs6f17Cir9xYKrnSX3Hhjj1vjDftvfkzTnhnFwOPb9c8uHwN3zTesnCtpMNpkH5pyEFeyIWmSDavyb6GcBf2D9ymHHq2IaADjgF/G0W+hafrePs3zBois=
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=IJ5ujY9DFIJ6fURdJMhqBxIXrS+QrbXazxk1ITw3K7xKsLuYw2bY3r08a9aEq6Mxqb36jEQuwyAcLifzwQdAXGH10j2ZDRnpDFCur0fDnIfbkffI8ZdAIu6peIgETBu1OU0sY5gG/4r4cBSWJNi29wOxQWoXWW74+6WGNS1PwVRRJsipdrm9YICHAx1Y1ugWIokn9OfOSeEpJLE/WV6KVlNbfq8n7baNrtr+0nivehpJvSgL7073GEj8L3tP1mXVFYIk7+/Y+ayIrJCzsyLKFXXT+wg5DnRkvXqvwZjl72Coh82mWWMBDJf7V09x3+bls9YAuTrduFUsssLSQnQrMg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=PYIo05JruMamN4whpLJw2LQ8xW6mI8VQfKOj9zyYYsE=;
b=nnvOjfIm+KYJlMIUJCps1MP3Z8NQfls1SorfDBQYYmoxuLdVU3cjd1ejfD1KbXxcOpt073TA6Mtrt/urzZYsd5WDVy5x8+e+5j8sN5WcTJe9BBQvEp0Ud9P01rdiugBk73DuVNk8t6RF+wIdG8Uatr6rXpyKXEVA9eitS0vhnZEZHTBhTsEOyr978GiSQlUD90hgG8TBIX+PO6cQwbkxOCMdftz8zfNsr7V0wGjwYZjzA7ykPz1rJKfulZByfbsKsoiA5GDQLDJt/h0YeKBzMYW2g2vlRATKS51UK7NRumRP1D6HNzWjNAShDcIZRBgyuTN5ZpAwmoUD6Q+y01OZxw==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is
23.83.209.55) smtp.rcpttodomain=mit.edu smtp.mailfrom=cryptonector.com;
dmarc=bestguesspass action=none header.from=cryptonector.com; dkim=pass
(signature was verified) header.d=cryptonector.com; arc=pass (0 oda=0 ltdi=0
93)
Authentication-Results: spf=pass (sender IP is 23.83.209.55)
smtp.mailfrom=cryptonector.com; dkim=pass (signature was verified)
header.d=cryptonector.com;dmarc=bestguesspass action=none
header.from=cryptonector.com;
Received-SPF: Pass (protection.outlook.com: domain of cryptonector.com
designates 23.83.209.55 as permitted sender) receiver=protection.outlook.com;
client-ip=23.83.209.55; helo=eastern.birch.relay.mailchannels.net; pr=C
X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com
ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1698345210; a=rsa-sha256;
cv=none;
b=F9BcYDN6cO0h8P3rpmdWXEL8Qln5w5Gg6BvfokF9W08yvpPHr5+kwkYmEHELp6yo3o78yA
nv6SKcOLmLTBbNcTbkTgrskmVESX/OMBmnysPuMZTJalyf/Oqlv305DutfHpKKzRvMMu8w
uT4vZdJ4XAuTJdyKRQUSdJynuCWGQUkXkv48K9gxA/cFUxtspH39MWGtx8+cwWoiFFTdVA
A4alZxgJkO26EX1sP7wmNkPmn5vuE/kMlWqANbOJx1+FljktA6tM/xlu4QqpCmKi0Znq72
n4DNPn67BRk9BLxnSdXqm14hJFbfsNn3/nLAV1LTg5DFHCwSvvZVp3ToJ7zoNg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=mailchannels.net; s=arc-2022; t=1698345210;
h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
to:to:cc:cc:mime-version:mime-version:content-type:content-type:
in-reply-to:in-reply-to:references:references:dkim-signature;
bh=PYIo05JruMamN4whpLJw2LQ8xW6mI8VQfKOj9zyYYsE=;
b=13U7N5+OXbwbUjBYC8KuKLPySrq7kC59b8RC05N2PGtWD0RzB4qkxqYqOmgS1GsTKyQwpE
FAZT1fOJDt3DXwq/SciXPCnmhbiQOiy6oZPs/dTAsls7SOdWE4l6jJGUgTT2ObU0TsZJWE
nYewS33/z6JpDAOB0PHeCBjlEgnhJMRxDenR7vIGtGibGbKi6LuRAl6pPPzKhL931iUaNL
0xk+IB2+cS3nDD2ysBjIsDID0tz3V2zJkkZcfHBOY1Sk635DXqvOCGsRzFwvih+t1i4KGt
pbd7pGfeDKlPypUQ+EmgRyWwrs+o3QKzNVkXOlSjvwZ567mJBxxbbxQAJ6zm6g==
ARC-Authentication-Results: i=1; rspamd-86646d89b6-8l89m;
auth=pass smtp.auth=dreamhost smtp.mailfrom=nico@cryptonector.com
X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com
X-MC-Relay: Neutral
X-MailChannels-SenderId: dreamhost|x-authsender|nico@cryptonector.com
X-MailChannels-Auth-Id: dreamhost
X-Imminent-Suffer: 2175f7ef06925d90_1698345210722_3898421492
X-MC-Loop-Signature: 1698345210722:4154802186
X-MC-Ingress-Time: 1698345210722
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryptonector.com;
s=dreamhost; t=1698345210;
bh=PYIo05JruMamN4whpLJw2LQ8xW6mI8VQfKOj9zyYYsE=;
h=Date:From:To:Cc:Subject:Content-Type;
b=qHjAGLBt+WHP/NiNJ3AsalB6KY6EUeMPiioD7bqiQ59z3ri/hc+PGe3CM0ygshaZ1
OvpYyCzV06zvoiPhjllIGZ3TptQ5z3BoGpvx4KUq2qC/mQvZJBaBul40YIxyPJjbA5
U2ZD0rSuTOpZyYw7kVEXzzEeQqFogkCNw31sRQYvLv2qy0bOoKLFRy/VXVh7eqPmb2
OQ+70XtcXiOw/R7LxoffMVTPLXfxyIoKFp0S1RLf7+gm4Cw+ii8UVSY0F9h/lvb3/x
qJFPpZ7+cK4ZiozLrS+99kgWixF5Zvw/AHrzcsKdC9nFrXUy1Ja5ED4HSrX/qSE07v
CsOAIMnBizUvw==
Content-Disposition: inline
In-Reply-To: <202310261827.39QIRu4Q000307@hedwig.cmf.nrl.navy.mil>
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BL6PEPF0001AB4A:EE_|SJ2PR01MB7898:EE_
X-MS-Office365-Filtering-Correlation-Id: 00e1881d-7ce2-4159-127a-08dbd6520e9b
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:23.83.209.55; CTRY:CA; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:eastern.birch.relay.mailchannels.net;
PTR:eastern.birch.relay.mailchannels.net; CAT:NONE;
SFS:(13230031)(4636009)(396003)(39860400002)(136003)(376002)(346002)(48200799006)(61400799006)(64100799003)(451199024)(4744005)(55016003)(2906002)(356005)(316002)(786003)(70586007)(7636003)(7596003)(9686003)(68406010)(6666004)(6266002)(336012)(83380400001)(9576002)(5660300002)(6862004)(86362001)(8676002)(956004)(4326008)(26005)(498600001)(33716001)(67856001);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Oct 2023 18:33:31.8294 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 00e1881d-7ce2-4159-127a-08dbd6520e9b
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: BL6PEPF0001AB4A.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR01MB7898
X-OriginatorOrg: mitprod.onmicrosoft.com
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <ZTqw9+Etcwo8SqR4@ubby21>
X-Mailman-Original-References: <202310241950.39OJoa0Z000708@hedwig.cmf.nrl.navy.mil>
<3db2752e-565e-1f64-b354-9031a2fe9334@mit.edu> <ZTiT0ub2uv5A/b4E@ubby21>
<202310251251.39PCpTqc026799@hedwig.cmf.nrl.navy.mil>
<ZTk62q0DIAZmW0eL@ubby21>
<CALF+FNwtDrQ0d+a=zsXyiYq6rhOiXXkqoxUnscwum0Q0wchLJQ@mail.gmail.com>
<202310261741.39QHfgIl030099@hedwig.cmf.nrl.navy.mil>
<ZTqtQYPlzdpQGyr+@ubby21>
<202310261827.39QIRu4Q000307@hedwig.cmf.nrl.navy.mil>