Public Key Cryptography for KDC Recovery in Kerberos V5

Document Type Expired Internet-Draft (cat WG)
Author Jonathan Trostle 
Last updated 1998-11-24 (latest revision 1998-04-07)
Stream Internet Engineering Task Force (IETF)
Expired & archived
plain text pdf htmlized bibtex
Stream WG state WG Document
Document shepherd No shepherd assigned
IESG IESG state Expired
Consensus Boilerplate Unknown
Telechat date
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft can be found at


This document defines extensions to the Kerberos protocol specification (RFC 1510, 'The Kerberos Network Authentication Service (V5)', September 1993) to enable the recovery of a compromised Kerberos V5 KDC using public key cryptography. The document specifies the recovery protocol which uses preauthentication data fields and error data fields in Kerberos messages to transport recovery data.


Jonathan Trostle (

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)