Implement RFC 8636 to support crypto agility
Open
enhancement
Kerberos.NET
- Dominant language
- C#
- Stars
- 567
- Forks
- 109
- PR merge metrics
- No merged PRs in 30d
Description
PKINIT is an asymmetric crypto extension for the initial AS-REQ authentication exchange. It's used for smart card (cert-based) authentication. The protocol has some crypto bits that are showing their age like the hardcoding of SHA-1.
RFC 8636 handles this by exposing some knobs to modify the types of algorithms used.
https://tools.ietf.org/html/rfc8636
https://tools.ietf.org/html/rfc4556
Contributor guide
Assessment
This issue has not been assessed yet.