Received: from PACIFIC-CARRIER-ANNEX.MIT.EDU by po7.MIT.EDU (5.61/4.7) id AA15673; Sat, 24 Feb 96 19:44:21 EST Received: from NS.NETANS.COM by MIT.EDU with SMTP id AA25780; Sat, 24 Feb 96 19:43:44 EST Received: from localhost (localhost) by falcon.NetAns.com (8.7.3/8.7.3) with internal id SAA15953; Sat, 24 Feb 1996 18:44:16 -0600 (CST) Date: Sat, 24 Feb 1996 18:44:16 -0600 (CST) From: Mail Delivery Subsystem Subject: Returned mail: /home/dwm/.forward: line 1: "| /usr/sbin/sm.bin/procmail #dwm"... User dwm@falcon.NetAns.com doesn't have a valid shell for mailing to programs Message-Id: <199602250044.SAA15953@falcon.NetAns.com> To: Mime-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="SAA15953.825209056/falcon.NetAns.com" Auto-Submitted: auto-generated (failure) This is a MIME-encapsulated message --SAA15953.825209056/falcon.NetAns.com The original message was received at Sat, 24 Feb 1996 18:44:14 -0600 (CST) from SOUTH-STATION-ANNEX.MIT.EDU [18.72.1.2] ----- The following addresses have delivery notifications ----- "| /usr/sbin/sm.bin/procmail #dwm" (unrecoverable error) (expanded from: ) ----- Transcript of session follows ----- 550 /home/dwm/.forward: line 1: "| /usr/sbin/sm.bin/procmail #dwm"... User dwm@falcon.NetAns.com doesn't have a valid shell for mailing to programs --SAA15953.825209056/falcon.NetAns.com Content-Type: message/delivery-status Reporting-MTA: dns; falcon.NetAns.com Received-From-MTA: DNS; SOUTH-STATION-ANNEX.MIT.EDU Arrival-Date: Sat, 24 Feb 1996 18:44:14 -0600 (CST) Final-Recipient: RFC822; dwm@falcon.NetAns.com X-Actual-Recipient: RFC822; "| /usr/sbin/sm.bin/procmail #dwm"@falcon.NetAns.com Action: failed Status: 5.7.1 Last-Attempt-Date: Sat, 24 Feb 1996 18:44:16 -0600 (CST) --SAA15953.825209056/falcon.NetAns.com Content-Type: message/rfc822 Return-Path: owner-kerberos@MIT.EDU Received: from MIT.EDU (SOUTH-STATION-ANNEX.MIT.EDU [18.72.1.2]) by falcon.NetAns.com (8.7.3/8.7.3) with SMTP id SAA15952 for ; Sat, 24 Feb 1996 18:44:14 -0600 (CST) Received: from pad-thai.cam.ov.com by MIT.EDU with SMTP id AA20660; Sat, 24 Feb 96 19:08:12 EST Received: by pad-thai.cam.ov.com (8.6.12/) id ; Sat, 24 Feb 1996 19:12:24 -0500 Received: from GATEWAY by pad-thai.cam.ov.com with netnews for kerberos-wrapper@cam.ov.com (kerberos@mit.edu) To: kerberos@MIT.EDU Date: 24 Feb 1996 18:39:47 -0500 From: eichin@cygnus.com (Mark Eichin) Message-Id: Organization: Cygnus Support -- Compilers & Kerberos Sender: usenet@cam.ov.com References: <4g5jdd$iv4@umbc7.umbc.edu>, <4g5k5e$21c@narnia.cs.purdue.edu> Subject: Re: Kerberos Weakness (COAST Findings) >> With des_random_key available and no access to the MIT code, why use the >> old, broken (as it turned out) ranom_key function? Point of information: in the MIT code, "des_random_key" *is* the broken one; "random_key" is a backwards-compatibility define (for kerberos 3, maybe? :-) along with a few other non-prefixed names. The correct generator *for the MIT libraries* is called des_new_random_key. This naming, of course, isn't to relevant, since eBones had neither the calls to the random generator *nor* any of the generators... leaving plenty of opportunities to be more or less creative with the information. _Mark_ Cygnus Support Cygnus Network Security http://www.cygnus.com/data/cns/ --SAA15953.825209056/falcon.NetAns.com--