Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: nic...@cryptonector.com (Nico Williams)
Newsgroups: comp.protocols.kerberos
Subject: Re: RFC 4121 & acceptor subkey use in MIC token generation
Date: Fri, 27 Oct 2023 15:27:26 -0500
Organization: TNet Consulting
Lines: 41
Message-ID: <mailman.38.1698438461.2263420.kerberos@mit.edu>
References: <ZTqtQYPlzdpQGyr+@ubby21>
<202310261827.39QIRu4Q000307@hedwig.cmf.nrl.navy.mil>
<ZTqw9+Etcwo8SqR4@ubby21>
<202310261838.39QIcl16000930@hedwig.cmf.nrl.navy.mil>
<ZTrAlh0a/+Vq5P4f@ubby21>
<202310262110.39QLAdhW010116@hedwig.cmf.nrl.navy.mil>
<ZTraV0714XV7hsxx@ubby21>
<202310262157.39QLvb2C012728@hedwig.cmf.nrl.navy.mil>
<48daa6105af9bb8794a0003e75ad7cd3fdf3c9e4.camel@redhat.com>
<202310271801.39RI15Ud018075@hedwig.cmf.nrl.navy.mil>
<ZTwdLkmGk3G+vv6B@ubby21>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="26734"; mail-complaints-to="newsmaster@tnetconsulting.net"
Cc: Simo Sorce <simo@redhat.com>, kerberos@mit.edu
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
DKIM-Filter: OpenDKIM Filter v2.11.0 unknown-host (unknown-jobid)
Authentication-Results: mailman.mit.edu;
dkim=pass (1024-bit key, unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=shNpkDR4;
dkim=pass (2048-bit key,
unprotected) header.d=cryptonector.com header.i=@cryptonector.com
header.a=rsa-sha256 header.s=dreamhost header.b=C1ghLmnv
Authentication-Results: mit.edu; dmarc=none (p=none dis=none)
header.from=cryptonector.com
Authentication-Results: mit.edu; arc=pass smtp.remote-ip=18.7.73.16
ARC-Seal: i=4; a=rsa-sha256; d=mit.edu; s=arc; t=1698438459; cv=pass;
b=d8Y3VT761HWKzvArOHqpgtNhcHMQZ2Iaj04tB49yDKMgNG/7CGKaodqLocqmQcrHg/eDkboojR5vhNlzxQahMYiL86sDgbq4tBC9wdT45jjmzjoML1S/j/M0QBPzFAAADrg7Cd5BGeCP/dL/Job8384MiJCjG8w/4x7Q++OT0Ird8OXS5ycF/XVfYTFHS+V2k5KOIegAEXprSn1CqMJFcd2KM8sT3pSWd9EWjJggLSunXRgGKvAoVCy/q5LBk4ZTyWfv+85WTztnBPfZJx73d/poccuN3FeyQCb50isT1gN8IZbEtbWfb/xzOdgi1QmqvJ/U7awza16ZYrx6AfU4HA==
ARC-Message-Signature: i=4; a=rsa-sha256; d=mit.edu; s=arc; t=1698438459;
c=relaxed/relaxed; bh=W8QA1GRNfR1CEKwomkMkhkFy491CrCGAHL+wK16WFbM=;
h=Date:From:Subject:Message-ID:MIME-Version:Content-Type;
b=Y41ITBLbs5xvr/eC+xwvPD1cqnjcc2IkYe7TUOI9QFJ4SRVZWLw2S0+uivvRXytBZjUacPKlV+380gzhPCh3JCF4H1rh1GwdhNnZ1IYYtfmdq++YNRd/K9mmRsImAYe1lMl9bvuR8QwzZ7q+RJxtLZ/+P/rL0eephVcTjgEsloqpS80iedtOWxsd1rNrsb6OSNNnQt2Rqw74509x+IKLRcxJHXPGRehHseZ+VQMmhpYvADhIdBzaRQb1Gvmragb1MCsNums6u8vM3LLpzHM7c3qyglplMcIRAvDocSk/S1omZayQlE0rHURUlgx2OarP2hF0/W+MtrXHpvb92HJXKw==
ARC-Authentication-Results: i=4; mit.edu; dkim=pass (1024-bit key;
unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=shNpkDR4;
dkim=pass (2048-bit key;
unprotected) header.d=cryptonector.com header.i=@cryptonector.com
header.a=rsa-sha256 header.s=dreamhost header.b=C1ghLmnv
Authentication-Results: mit.edu; dkim=pass (1024-bit key;
unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=shNpkDR4;
dkim=pass (2048-bit key;
unprotected) header.d=cryptonector.com header.i=@cryptonector.com
header.a=rsa-sha256 header.s=dreamhost header.b=C1ghLmnv
ARC-Seal: i=3; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=j8xbynr1VxpbZMed6KT7nPE3ZeiIP/mzJHPf2Fyf7MNYfLs2WvIIquTCJ1Nd73EZ1rHYID05rCgy/CLxsvnU4w8GTbyYORWNc6yHMw631lsofXnmC6zZ5xBu7DlTZ460CfpOd7j1kSCAM3POFY/QGMUqP2fecqILd8CPeefTXfUkZnWiE+xkVJwbZXiAISx5IfesOrz4zCS7fQBPCn6NUfG0WI2pZQT781rU4C1HalwtRKUP1U6ZdBhfDsuaI3apr0z9TWmK+lqgYHCCg7I4yQUSipYddEDdnXi3hMZuJd0qtn1huiPsdD7lnGf/E0XU4Cd52q64e+nWDVZlY/SSxw==
ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=W8QA1GRNfR1CEKwomkMkhkFy491CrCGAHL+wK16WFbM=;
b=nTZHzH2XcR2zwfDNpZVvexT0ZBA1mYusLAYuZo+RmYgQBEAEJQZsh7c0JhBiK6rwPnRiPYbbU+nf4+4MmyitSRoZ5oKBQL8a7MKFa/8NS/R/TkSY8VkFlnjBkp+fljbVSXVtaRb3UT+z3NHJi3n8Qlyz2YIr4zUVQsq9V8q6FKe/oiEP9yQhxCxqAx9oVsq+0PoKa02X8rnf5sre0/KEl2yRajLsLCxYBykLfidprSe+yVV8ekMeypuXaGziDFp0wWhJ3pWZohE1OlbWIpKClxNjWCM0YLPRpeLmqgv8hkBVBVYKgffEkPKUTw/D1i+fyoL+KX+pXLs4rtExn0kPzg==
ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=pass (sender ip is
23.83.223.162) smtp.rcpttodomain=mit.edu smtp.mailfrom=cryptonector.com;
dmarc=bestguesspass action=none header.from=cryptonector.com; dkim=pass
(signature was verified) header.d=cryptonector.com; arc=pass (0 oda=0 ltdi=0
93)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=W8QA1GRNfR1CEKwomkMkhkFy491CrCGAHL+wK16WFbM=;
b=shNpkDR4N0AROttfWfnoF7TDqfnnmhH9O4YUmSWKeRTNwu6u+SzV5TdTb2PH4P89bQkY4/RyhDPBhp1u4AySEppII6KEyRsPAXbgaYmsVfXspiRMJYZSOsjvWed8sfi/99KPRUCDQrsa5obvuI9UVeX+b8taioa/lIhXGW3bf7E=
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=RfN4/H8LfYGLpM/5arKzyoy52QL/GqnH472zOtyfFbbFGW99E0Ul7UAcMDou0ys2wVKQA3UwiyUcTQnhA9y2tKn6WyBeg4eaNimEw4/jrabkSnvoObJrYKjT6dxciFPjZ0Ycphg8bFN6mV4pozZUwWTkH0PfpOfy2vpsc3QV/oa03ftGlbxwb8/2bc3mwQGKj2//naDMExOWJ4sJCyGcACtLasfSW2DV+mH5LDvCf86iACCc9Cm9ARNK9gMcMFCueIyYtGnur+P5YXountch5chW3gIUADdvsent/+Cz7htkf1D0/z/kSi1whWon5lrpRLbAcS53ltbxyuqXDAGCOw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=W8QA1GRNfR1CEKwomkMkhkFy491CrCGAHL+wK16WFbM=;
b=NAvX57li7IJTGj71uLx8lzLOWAsBNVLPG8Pfh7wcxR/aWuy3oTgGwt/PDcCNY5ay0/MuEZIE34j6P/ZnhDuJuLcIQ0Ketlj6CFe1VOT4JmfzdzTowNilGT7UFuReUI5WrZ99HNxV3FOHGkDrDpMCQoQoznpY5cjmQ/j6CAmLP8yvpHueYblvYPqrgRSo8gGCfcOR6hMGPJxKsL813A9qjnp1hv4LYxUKf3RHA5EK2nPU7tqOam8taq8NZNTzbKZT/yHeKfBdU4KJ42QIZG9LFTDElAoq+TqDl2KIC7s9r3/Sf3L+4FaJkMEeydoyD/uEPcMb2PqORr+g6zrRrs6hKQ==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is
23.83.223.162) smtp.rcpttodomain=mit.edu smtp.mailfrom=cryptonector.com;
dmarc=bestguesspass action=none header.from=cryptonector.com; dkim=pass
(signature was verified) header.d=cryptonector.com; arc=pass (0 oda=0 ltdi=0
93)
Authentication-Results: spf=pass (sender IP is 23.83.223.162)
smtp.mailfrom=cryptonector.com; dkim=pass (signature was verified)
header.d=cryptonector.com;dmarc=bestguesspass action=none
header.from=cryptonector.com;
Received-SPF: Pass (protection.outlook.com: domain of cryptonector.com
designates 23.83.223.162 as permitted sender)
receiver=protection.outlook.com; client-ip=23.83.223.162;
helo=seashell.cherry.relay.mailchannels.net; pr=C
X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com
ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1698438449; a=rsa-sha256;
cv=none;
b=Cb4AOOUUwgrxKrAZuOG3lVhnNMmSv7L4NND5mSp3Ugsdu/gNqMIHZe0/dnwckRqoJnFQw+
oh+ceiSk5i2vGn6oPMGJaB8Os+YGBtqS7vpJCVmYZFvQ3clBeHecL3si6kdzbqTZRBTRRJ
tvGXBHoTELwHnUth1RorvLfJvH7Ty/HhUx3H5VhwEMWf6LiFhCXJlC2EOrCn/4zq9+Z/JK
mDk7WHmgM7YeUwNaiUC1b5LuzIy6hRS374ogVDeZLqwmhSMbSheL6QW0VQiWrDtHPEWB5a
Xp4jbLQs7uRY6suhc8XAST5tVSBYsqlkNnHl67D/1gbBfcBH4WX1bdcTk1v2Jw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
d=mailchannels.net; s=arc-2022; t=1698438449;
h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
to:to:cc:cc:mime-version:mime-version:content-type:content-type:
in-reply-to:in-reply-to:references:references:dkim-signature;
bh=W8QA1GRNfR1CEKwomkMkhkFy491CrCGAHL+wK16WFbM=;
b=T1MFFR1uqL8Z9YLFEt1ei0NL37B4GkXgiUXGFX7w/ueteGx1rINONhxA0lG9Dju4gY7CLk
yiBjPyQoBB30a6yeP93Qav28MscZOTfDb1WdVgSWwx+aK0Ll4pmmhr1Q/INc/3MP3Wtu80
WJ+VVxVZWjT7l2ImkyMsXIWtmWFAHe5Pnb9l4auxwVLRzbBroAf9GMbJTKRROMwH9FKO/y
RKKWPpjOSvEs9YDZt0YNKYRgFTw2lnCGQ+df+Tt3vcCMf0IIQvlQrsyr1L9+duaXd5JJje
bbFu/ww4rcpVJ8cmPwIJUSN66v7PX/SS+Mo3CqNJLFCiuPnFMbL/WDl+ssQ6Dg==
ARC-Authentication-Results: i=1; rspamd-79d8cddc67-78226;
auth=pass smtp.auth=dreamhost smtp.mailfrom=nico@cryptonector.com
X-Sender-Id: dreamhost|x-authsender|nico@cryptonector.com
X-MC-Relay: Neutral
X-MailChannels-SenderId: dreamhost|x-authsender|nico@cryptonector.com
X-MailChannels-Auth-Id: dreamhost
X-Scare-Troubled: 6ac43be00487c972_1698438449685_4282843705
X-MC-Loop-Signature: 1698438449685:240311106
X-MC-Ingress-Time: 1698438449684
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cryptonector.com;
s=dreamhost; t=1698438449;
bh=W8QA1GRNfR1CEKwomkMkhkFy491CrCGAHL+wK16WFbM=;
h=Date:From:To:Cc:Subject:Content-Type;
b=C1ghLmnv2yVKIdSfdXy8Gn5iTsK4L8sFAQkLXVeXcMx6+hI0BSuuFyGeOVmnksbOj
F1b0nMxfSXLwsV3fC5cevUbA2W/YjR7xaatKDmHmNaoKMKeIjkNcEGuICwhb/+iFd1
sQCduGIvBLF8tguuSclUfQRmrGZIGazeEetOEuDOavrcsfgHm5syNICW61YJ7G0xla
MDioHCZH/EG/kAcT+FslwPod1JP7ebGEmFKqqrO+4iV2ZTR5np4RietHcdNEjMw3+I
PNEkrAocNpsoY0lBjaZPYBmMt/g7UzNWSlO3bGuiKWTwHAQMY3gFQqSjiAJ7HrIO0H
JLDG3MvjkW4TA==
Content-Disposition: inline
In-Reply-To: <202310271801.39RI15Ud018075@hedwig.cmf.nrl.navy.mil>
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: CY4PEPF0000EDD5:EE_|PH0PR01MB6423:EE_
X-MS-Office365-Filtering-Correlation-Id: 5d69794d-dd0f-4b4b-12b2-08dbd72b250e
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:23.83.223.162; CTRY:CA; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:seashell.cherry.relay.mailchannels.net;
PTR:seashell.cherry.relay.mailchannels.net; CAT:NONE;
SFS:(13230031)(4636009)(396003)(136003)(39860400002)(346002)(376002)(64100799003)(451199024)(48200799006)(61400799006)(55016003)(336012)(83380400001)(498600001)(6266002)(86362001)(33716001)(8676002)(5660300002)(9686003)(4326008)(6862004)(956004)(26005)(9576002)(7596003)(316002)(786003)(2906002)(356005)(7636003)(68406010)(70586007)(67856001);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Oct 2023 20:27:30.5645 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 5d69794d-dd0f-4b4b-12b2-08dbd72b250e
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: CY4PEPF0000EDD5.namprd03.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR01MB6423
X-OriginatorOrg: mitprod.onmicrosoft.com
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <ZTwdLkmGk3G+vv6B@ubby21>
X-Mailman-Original-References: <ZTqtQYPlzdpQGyr+@ubby21>
<202310261827.39QIRu4Q000307@hedwig.cmf.nrl.navy.mil>
<ZTqw9+Etcwo8SqR4@ubby21>
<202310261838.39QIcl16000930@hedwig.cmf.nrl.navy.mil>
<ZTrAlh0a/+Vq5P4f@ubby21>
<202310262110.39QLAdhW010116@hedwig.cmf.nrl.navy.mil>
<ZTraV0714XV7hsxx@ubby21>
<202310262157.39QLvb2C012728@hedwig.cmf.nrl.navy.mil>
<48daa6105af9bb8794a0003e75ad7cd3fdf3c9e4.camel@redhat.com>
<202310271801.39RI15Ud018075@hedwig.cmf.nrl.navy.mil>