From 85a5e5fb301be84413d8fcf3c0ddf2d07deaa198 Mon Sep 17 00:00:00 2001 From: Luke Howard Date: Fri, 24 Sep 2021 07:38:10 +1000 Subject: [PATCH] gss_preauth: remove protocol changes section from README Heimdal implements draft-perez-krb-wg-gss-preauth-03 without protocol changes (the draft was updated to match the implementation) --- lib/gss_preauth/README.md | 9 --------- 1 file changed, 9 deletions(-) diff --git a/lib/gss_preauth/README.md b/lib/gss_preauth/README.md index 500270746..2a3b14259 100644 --- a/lib/gss_preauth/README.md +++ b/lib/gss_preauth/README.md @@ -6,15 +6,6 @@ but with some simplifications to the protocol. The following text assumes the reader is familiar with the draft. -## Protocol changes - - - The pre-authentication type KRB5-PADATA-GSS is 655 - - Pre-authentication data is the raw context token rather than being - wrapped in another ASN.1 type - - Acceptor GSS state is stored in FX-COOKIE rather than alongside the - context token - - Key derivation salt is the string "KRB-GSS\0" || nonce - ## Client side Because libkrb5 cannot have a recursive dependency on libgssapi, it instead