IETF RFC 8429
[ACTIVE]
Deprecate Triple-DES (3DES) and RC4 in Kerberos
Metadata
- Publisher
- IETF
- Doc Type
- Best Practice
- Pages
- 10
- Abstract
- The triple-DES (3DES) and RC4 encryption types are steadily weakening in cryptographic strength, and the deprecation process should begin for their use in Kerberos. Accordingly, RFC 4757 has been moved to Historic status, as none of the encryption types it specifies should be used, and RFC 3961 has been updated to note the deprecation of the triple-DES encryption types. RFC 4120 is likewise updated to remove the recommendation to implement triple-DES encryption and checksum types.
- Publication Date
- 2018-10-01
- Status Note
- Best Current Practice
- DOI
10.17487/RFC8429- Link
- https://doi.org/10.17487/RFC8429
- Author(s)
- Benjamin KadukMichiko Short
- Keyword(s)
- GSSAPI, GSS
Latest version of IETF RFC 8429
Document Versions — IETF RFC 8429
-
▶ IETF RFC 8429 (2018-10-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 2119 [Active*]
- IETF RFC 3961 [Active*]
- IETF RFC 4120 [Active*]
- IETF RFC 8174 [Active*]
Bibliographic Reference(s)
- MIT, "Kerberos: The Network Authentication Protocol", < https://web.mit.edu/kerberos/ >. EXTERNAL
- Microsoft Corporation, "[ MS-NLMP ]: NT LAN Manager (NTLM) Authentication Protocol", September 2017, < https://msdn.microsoft.com/en-us/library/cc236621.aspx >. EXTERNAL
- Heimdal Project, "The Heimdal Kerberos 5, PKIX, CMS, GSS- API, SPNEGO, NTLM, Digest-MD5 and, SASL implementation", < https://www.h5l.org/ >. EXTERNAL
- IANA, "Kerberos Parameters", < https://www.iana.org/assignments/kerberos-parameters/ >. EXTERNAL
- IETF RFC 4757 [Active*]
- IETF RFC 6150 [Active*]
- IETF RFC 6649 [Active*]
- IETF RFC 7465 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC8429.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 8429, Deprecate Triple-DES (3DES) and RC4 in Kerberos. Available at https://doi.org/10.17487/RFC8429
Snippet:
IETF RFC 8429, Deprecate Triple-DES (3DES) and RC4 in Kerberos. Available at https://doi.org/10.17487/RFC8429
HTML (ISO 690 compliant)
Preview:
IETF RFC 8429, Deprecate Triple-DES (3DES) and RC4 in Kerberos. Available at https://doi.org/10.17487/RFC8429
Snippet:
<span class="citation"><cite>IETF RFC 8429</cite>, Deprecate Triple-DES (3DES) and RC4 in Kerberos. Available at <a href="https://doi.org/10.17487/RFC8429" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8429</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 8429, Deprecate Triple-DES (3DES) and RC4 in Kerberos
doi: 10.17487/RFC8429
url: https://doi.org/10.17487/RFC8429
doi: 10.17487/RFC8429
url: https://doi.org/10.17487/RFC8429
Snippet:
<li> <cite id="bib-rfc8429">IETF RFC 8429</cite>, Deprecate Triple-DES (3DES) and RC4 in Kerberos <span class="doi">10.17487/RFC8429</span> </li>
Referenced By
- IETF RFC 8758 [Active*]