QuestionQ62

Cryptography Concepts for Managers

Kerberos is a computer-network authentication protocol that lets individuals communicating over an insecure network securely prove their identities to each other. Which of the following statements are true of the Kerberos authentication scheme?

Each correct answer represents a complete solution. Choose all that apply.

Choose two
  • A Kerberos requires continuous availability of a central server.
  • B Kerberos builds on Asymmetric key cryptography and requires a trusted third party.
  • C Dictionary and brute force attacks on the initial TGS response to a client may reveal the subject's passwords.
  • D Kerberos requires the clocks of the involved hosts to be synchronized.
Explanation

Kerberos relies on a centrally available Key Distribution Center to provide ticket-granting services, although replica KDCs can provide redundancy. Its authentication exchanges use symmetric keys; it does not fundamentally build on asymmetric cryptography. Password-derived keys are relevant to the initial Authentication Service exchange, not a TGS response. Timestamp-based replay protection also requires hosts to maintain clocks within the configured allowable skew.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!