Expand description
Kerberos v5 Protocol (RFC 4120)
Implements Kerberos message types, principal names, encryption types,
and the client-side AS-REQ/AS-REP and TGS-REQ/TGS-REP flows. All
messages are encoded using crate::net::asn1 for ASN.1/BER serialization.
§Key Derivation
Provides string2key stubs for AES-256-CTS-HMAC-SHA1-96 (etype 18) using PBKDF2-HMAC-SHA1 with 4096 iterations. Full AES-CTS encryption is stubbed pending a complete AES implementation.
Structs§
- AsRep
Parts - Parsed AS-REP components.
- EncKdc
RepPart - Encrypted part of a KDC reply (EncKDCRepPart).
- Encrypted
Data - Encrypted data container (EncryptedData in RFC 4120).
- KdcReq
Body - KDC request body (KDC-REQ-BODY).
- Kerberos
Client - Kerberos v5 client.
- Kerberos
Time - Kerberos timestamp (seconds since epoch, integer-only).
- Principal
Name - Kerberos principal name.
- TgsRep
Parts - Parsed TGS-REP components.
- Ticket
- Kerberos Ticket.
Enums§
- Encryption
Type - Kerberos encryption types
- Kerberos
MsgType - Kerberos message types
- Name
Type - Kerberos name types
Constants§
- KDC_
PORT - Default Kerberos port
Functions§
- derive_
usage_ key - Derive a usage-specific key (dk) from a base key.
- random_
to_ key - Convert random bytes to a key (random-to-key).