Projects/FAST - Revision history

TomYu at 04:13, 16 February 2010

2010-02-16T04:13:10Z

2009-09-10T16:25:13Z

note completion

2009-03-23T17:42:21Z

‎Approvals

2009-03-19T17:16:37Z

2009-02-20T16:03:42Z

2009-01-30T21:19:10Z

Note that we need client subkey support

2009-01-29T19:45:30Z

‎Tasks: add encrypted challenge and authz data

2009-01-29T19:36:05Z

add out of scope section

2009-01-29T19:32:38Z

subst:project-vote

2009-01-29T19:31:34Z

send out for review

← Older revision		Revision as of 04:13, 16 February 2010
Line 1:		Line 1:
−	{{project-~~completed~~}}	+	{{project-rel\|1.7}}

	[http://tools.ietf.org/html/draft-ietf-krb-wg-preauth-framework-10 FAST] is a pre-authentication framework for Kerberos. It includes a mechanism for tunneling pre-authentication exchanges using armoured KDC messages. FAST provides increased resistance to passive password guessing attacks.		[http://tools.ietf.org/html/draft-ietf-krb-wg-preauth-framework-10 FAST] is a pre-authentication framework for Kerberos. It includes a mechanism for tunneling pre-authentication exchanges using armoured KDC messages. FAST provides increased resistance to passive password guessing attacks.

← Older revision		Revision as of 16:25, 10 September 2009
Line 1:		Line 1:
−	{{project-~~review\|2009-02-13~~}}	+	{{project-completed}}

	[http://tools.ietf.org/html/draft-ietf-krb-wg-preauth-framework-10 FAST] is a pre-authentication framework for Kerberos. It includes a mechanism for tunneling pre-authentication exchanges using armoured KDC messages. FAST provides increased resistance to passive password guessing attacks.		[http://tools.ietf.org/html/draft-ietf-krb-wg-preauth-framework-10 FAST] is a pre-authentication framework for Kerberos. It includes a mechanism for tunneling pre-authentication exchanges using armoured KDC messages. FAST provides increased resistance to passive password guessing attacks.

@@ Line 1: / Line 1: @@
 {{project-review|2009-02-13}}
-[http://tools.ietf.org/html/draft-ietf-krb-wg-preauth-framework-09 FAST] is a pre-authentication framework for Kerberos. It includes a mechanism for tunneling pre-authentication exchanges using armoured KDC messages.  FAST provides increased resistance to  passive password guessing attacks.
+[http://tools.ietf.org/html/draft-ietf-krb-wg-preauth-framework-10 FAST] is a pre-authentication framework for Kerberos. It includes a mechanism for tunneling pre-authentication exchanges using armoured KDC messages.  FAST provides increased resistance to  passive password guessing attacks.
 ==Functional requirements==

@@ Line 1: / Line 1: @@
 {{project-review|2009-02-13}}
-[http://tools.ietf.org/internet-drafts/draft-ietf-krb-wg-preauth-fw.txt FAST] is a pre-authentication framework for Kerberos. It includes a mechanism for tunneling pre-authentication exchanges using armoured KDC messages.  FAST provides increased resistance to  passive password guessing attacks.
+[http://tools.ietf.org/html/draft-ietf-krb-wg-preauth-framework-09 FAST] is a pre-authentication framework for Kerberos. It includes a mechanism for tunneling pre-authentication exchanges using armoured KDC messages.  FAST provides increased resistance to  passive password guessing attacks.
 ==Functional requirements==

@@ Line 74: / Line 74: @@
 * Write FAST TGS support
 * Add cookie support
 ===Utilities needed===

@@ Line 59: / Line 59: @@
 * Write support for generating the cookie and generating a finish sequence
 * Write support for fast factors
 ===Client changes===
@@ Line 67: / Line 70: @@
 * Add support for fast factor only pre-auth
 * Write support for  constructing the fast request
 * Write FAST TGS support
 * Add cookie support
@@ Line 74: / Line 79: @@
 * encode KRBFastArmoredReq
 * Encode KRBFastResponse
 * Encode KRBFastReq
 * Implement krb_fx_cf2
@@ Line 84: / Line 91: @@
 A brief description  of the functionality for the admin guide would be useful.
 In addition, a description of the API introduced with the GIC options and updating the comments for the plugin interface will be required.
 ==Out of scope==

← Older revision		Revision as of 19:36, 29 January 2009
Line 85:		Line 85:
	In addition, a description of the API introduced with the GIC options and updating the comments for the plugin interface will be required.		In addition, a description of the API introduced with the GIC options and updating the comments for the plugin interface will be required.

		+
		+	==Out of scope==
		+
		+	* Support for authentication sets
		+	* Support for multi-round-trip mechanisms and KDC_ERR_MORE_PREAUTH_DATA_NEEDED
		+	* Support for anonymous pkinit
		+	* Support for authentication strength indication

	==External Dependencies==		==External Dependencies==

← Older revision		Revision as of 19:32, 29 January 2009
Line 89:		Line 89:

	The FAST proposal has not yet been approved by the IETF.		The FAST proposal has not yet been approved by the IETF.
		+
		+
		+	==Review==
		+
		+	This section documents the review of the project according to [[Project policy]].
		+	It is divided into multiple sections. First, approvals should be listed. To list an approval type
		+	:<nowiki>#~~~~</nowiki>
		+	on its own line.
		+	The next section is for discussion. Use standard [http://en.wikipedia.org/wiki/Wikipedia:Tutorial_%28Talk_pages%29 talk page conventions]. In particular, sign comments with
		+	:<nowiki>--~~~~</nowiki>
		+	and indent replies.
		+
		+	Members of Krbcore raising Blocking objections should preface their comment with <nowiki>{{project-block}}</nowiki>. The member who raised the objection should remove this markup when their objection is handled.
		+
		+	===Approvals===
		+
		+	===Discussion===

← Older revision		Revision as of 19:31, 29 January 2009
Line 1:		Line 1:
−	{{project-~~early~~}}>	+	{{project-review\|2009-02-13}}

	[http://tools.ietf.org/internet-drafts/draft-ietf-krb-wg-preauth-fw.txt FAST] is a pre-authentication framework for Kerberos. It includes a mechanism for tunneling pre-authentication exchanges using armoured KDC messages. FAST provides increased resistance to passive password guessing attacks.		[http://tools.ietf.org/internet-drafts/draft-ietf-krb-wg-preauth-fw.txt FAST] is a pre-authentication framework for Kerberos. It includes a mechanism for tunneling pre-authentication exchanges using armoured KDC messages. FAST provides increased resistance to passive password guessing attacks.