Kerberos
Kerberos
olemus
vastastikuse autentimise protokoll, MIT väljatööde;
põhineb
- krüpteerimisel
- ajatemplitel
- paroolidel
- usaldataval kolmandal poolel
kaitseb
- pealtkuulamise eest
- taasesitusrünnete eest
=
a protocol for authenticating service requests between trusted hosts across an untrusted network
ülevaateid
http://homes.soic.indiana.edu/yh33/Teaching/I433-2016/lec15-kerberos.pdf
http://wwwusers.di.uniroma1.it/~parisi/Risorse/Kerberos.pdf
https://en.wikipedia.org/wiki/Kerberos_(protocol)
http://user.it.uu.se/~hsander/Courses/DistributedSystems/Reports/Kerberos.pdf
https://web.mit.edu/kerberos/
turvalisus
https://www.cvedetails.com/vulnerability-list/vendor_id-42/product_id-61/MIT-Kerberos.html
https://www.theregister.co.uk/2017/07/13/kerberos_bug_dead_after_two_decades/
https://adsecurity.org/?p=2011
https://www.prosec-networks.com/en/blog/kerberos-attacks/
https://www.tarlogic.com/blog/how-to-attack-kerberos/
https://unit42.paloaltonetworks.com/next-gen-kerberos-attacks/