Kerberos5协议的安全分析  

Security Analysis of Kerberos 5 Protocol

作　　者：邵叶秦[1] 涂中群[1] 张小荣[1] SHAO Ye-qin, TU Zhong-qun,ZHANG Xiao-rong （Modem Education Technology Center, Nantong University, Nantong 226001, China）

机构地区：[1]南通大学现代教育技术中心,江苏南通226001

出　　处：《电脑知识与技术》2010年第02X期1319-1320,1323,共3页Computer Knowledge and Technology

摘　　要：Kerberos协议是一个被广泛采用的、基于可信任第三方提供安全认证服务的网络认证协议。利用共享的会话密钥，Kerberos协议保证了通信的机密性和完整性。描述了Kerberos5协议最新版本的基本原理，介绍了协议的详细过程，通过对比前一版本，分析了其改进之处和仍存在的不足。Kerberos is a widely-adopted network authentication protocol, which provides secure authentication service based on the trusted third-party. By exploiting a shared key, Kerberos ensures the confidentiality and integrity for a session. This paper describes the basic prin- ciples of the newly- issued version, introduces the detailed procedure of the protocol and by being compared with the previous version, analyze the improvement and faults of Kerberos 5.

关 键 词：KERBEROS协议 安全分析 认证 

分 类 号：TP393[自动化与计算机技术—计算机应用技术;自动化与计算机技术—计算机科学与技术]