%% You should probably cite rfc8009 instead of this I-D. @techreport{ietf-kitten-aes-cts-hmac-sha2-04, number = {draft-ietf-kitten-aes-cts-hmac-sha2-04}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-kitten-aes-cts-hmac-sha2/04/}, author = {Michael J. Jenkins and Michael Peck and Kelley W. Burgin}, title = {{AES Encryption with HMAC-SHA2 for Kerberos 5}}, pagetotal = 16, year = 2014, month = jul, day = 21, abstract = {This document specifies two encryption types and two corresponding checksum types for Kerberos 5. The new types use AES in CTS mode (CBC mode with ciphertext stealing) for confidentiality and HMAC with a SHA-2 hash for integrity.}, }