Document Search

Document Date Status IPR AD / Shepherd
RFCs (41 hits)
RFC 1411 (was draft-ietf-telnet-authker-v4)
Telnet Authentication: Kerberos Version 4
1993-01
4 pages
Experimental RFC
RFC 1510 (was draft-ietf-cat-kerberos)
The Kerberos Network Authentication Service (V5)
1993-09
112 pages
Historic RFC
Obsoleted by RFC4120, RFC6649
RFC 1964 (was draft-ietf-cat-kerb5gss)
The Kerberos Version 5 GSS-API Mechanism
1996-06
20 pages
Proposed Standard RFC
Updated by RFC4121, RFC6649
RFC 2623 (was draft-ietf-nfsv4-nfssec)
NFS Version 2 and Version 3 Security Issues and the NFS Protocol's Use of RPCSEC_GSS and Kerberos V5
1999-06
19 pages
Proposed Standard RFC
RFC 2712 (was draft-ietf-tls-kerb-cipher-suites)
Addition of Kerberos Cipher Suites to Transport Layer Security (TLS) Errata
1999-10
7 pages
Proposed Standard RFC
RFC 2942 (was draft-tso-telnet-krb5)
Telnet Authentication: Kerberos Version 5
2000-09
7 pages
Proposed Standard RFC
RFC 3244 (was draft-trostle-win2k-cat-kerberos-set-passwd)
Microsoft Windows 2000 Kerberos Change Password and Set Password Protocols
2002-02
7 pages
Informational RFC
RFC 3961 (was draft-ietf-krb-wg-crypto)
Encryption and Checksum Specifications for Kerberos 5 Errata
2005-02
50 pages
Proposed Standard RFC
Updated by RFC8429
Russ Housley 
RFC 3962 (was draft-raeburn-krb-rijndael-krb)
Advanced Encryption Standard (AES) Encryption for Kerberos 5
2005-02
16 pages
Proposed Standard RFC
Russ Housley 
RFC 4120 (was draft-ietf-krb-wg-kerberos-clarifications)
The Kerberos Network Authentication Service (V5) Errata
2005-07
138 pages
Proposed Standard RFC
Updated by RFC4537, RFC5021, RFC5896, RFC6111, RFC6112, RFC6113, RFC6649, RFC6806, RFC7751, RFC8062, RFC8129, RFC8429, RFC8553
Russ Housley 
RFC 4121 (was draft-ietf-krb-wg-gssapi-cfx)
The Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Mechanism: Version 2
2005-07
20 pages
Proposed Standard RFC
Updated by RFC5896, RFC6112, RFC6542, RFC6649, RFC8062
Russ Housley 
RFC 4402 (was draft-ietf-kitten-krb5-gssapi-prf)
A Pseudo-Random Function (PRF) for the Kerberos V Generic Security Service Application Program Interface (GSS-API) Mechanism Errata
2006-02
5 pages
Historic RFC
Obsoleted by RFC7802
Sam Hartman 
RFC 4537 (was draft-zhu-kerb-enctype-nego)
Kerberos Cryptosystem Negotiation Extension
2006-06
6 pages
Proposed Standard RFC
Sam Hartman 
RFC 4559 (was draft-jaganathan-kerberos-http)
SPNEGO-based Kerberos and NTLM HTTP Authentication in Microsoft Windows Errata
2006-06
8 pages
Informational RFC
Scott Hollenbeck 
RFC 4557 (was draft-ietf-krb-wg-ocsp-for-pkinit)
Online Certificate Status Protocol (OCSP) Support for Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Errata
2006-06
6 pages
Proposed Standard RFC
Sam Hartman 
RFC 4556 (was draft-ietf-cat-kerberos-pk-init)
Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Errata
2006-06
42 pages
Proposed Standard RFC
Updated by RFC6112, RFC8062, RFC8636
Sam Hartman 
RFC 4752 (was draft-ietf-sasl-gssapi)
The Kerberos V5 ("GSSAPI") Simple Authentication and Security Layer (SASL) Mechanism Errata
2006-11
10 pages
Proposed Standard RFC
Sam Hartman 
RFC 4757 (was draft-jaganathan-rc4-hmac)
The RC4-HMAC Kerberos Encryption Types Used by Microsoft Windows Errata
2006-12
18 pages
Historic RFC
Updated by RFC6649
Sam Hartman 
RFC 5021 (was draft-ietf-krb-wg-tcp-expansion)
Extended Kerberos Version 5 Key Distribution Center (KDC) Exchanges over TCP
2007-08
7 pages
Proposed Standard RFC
Sam Hartman 
RFC 5179 (was draft-ietf-kitten-krb5-gssapi-domain-based-names)
Generic Security Service Application Program Interface (GSS-API) Domain-Based Service Names Mapping for the Kerberos V GSS Mechanism
2008-05
5 pages
Proposed Standard RFC
Sam Hartman 
RFC 5349 (was draft-zhu-pkinit-ecc)
Elliptic Curve Cryptography (ECC) Support for Public Key Cryptography for Initial Authentication in Kerberos (PKINIT)
2008-09
10 pages
Informational RFC
Tim Polk 
RFC 5868 (was draft-ietf-krb-wg-cross-problem-statement)
Problem Statement on the Cross-Realm Operation of Kerberos
2010-05
13 pages
Informational RFC
Tim Polk 
RFC 6111 (was draft-ietf-krb-wg-naming)
Additional Kerberos Naming Constraints
2011-04
6 pages
Proposed Standard RFC
Tim Polk 
RFC 6112 (was draft-ietf-krb-wg-anon)
Anonymity Support for Kerberos Errata
2011-04
16 pages
Historic RFC
Obsoleted by RFC8062
Tim Polk 
RFC 6113 (was draft-ietf-krb-wg-preauth-framework)
A Generalized Framework for Kerberos Pre-Authentication
2011-04
48 pages
Proposed Standard RFC
Tim Polk 
RFC 6251 (was draft-josefsson-kerberos5-starttls)
Using Kerberos Version 5 over the Transport Layer Security (TLS) Protocol
2011-05
8 pages
Informational RFC
Tim Polk 
RFC 6448 (was draft-ietf-krb-wg-clear-text-cred)
The Unencrypted Form of Kerberos 5 KRB-CRED Message
2011-11
4 pages
Proposed Standard RFC
Stephen Farrell 
Sam Hartman 
RFC 6542 (was draft-ietf-krb-wg-gss-cb-hash-agility)
Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Channel Binding Hash Agility
2012-03
6 pages
Proposed Standard RFC
Stephen Farrell 
RFC 6649 (was draft-ietf-krb-wg-des-die-die-die)
Deprecate DES, RC4-HMAC-EXP, and Other Weak Cryptographic Algorithms in Kerberos
2012-07
7 pages
Best Current Practice RFC
Stephen Farrell 
Sam Hartman 
RFC 6784 (was draft-sakane-dhc-dhcpv6-kdc-option)
Kerberos Options for DHCPv6
2012-11
12 pages
Proposed Standard RFC
Stephen Farrell 
Jeffrey Hutzelman 
RFC 6803 (was draft-ietf-krb-wg-camellia-cts)
Camellia Encryption for Kerberos 5 Errata
2012-11
13 pages
Informational RFC
1 Stephen Farrell 
Jeffrey Hutzelman 
RFC 6806 (was draft-ietf-krb-wg-kerberos-referrals)
Kerberos Principal Name Canonicalization and Cross-Realm Referrals
2012-11
19 pages
Proposed Standard RFC
Stephen Farrell 
Jeffrey Hutzelman 
RFC 6880 (was draft-ietf-krb-wg-kdc-model)
An Information Model for Kerberos Version 5
2013-03
14 pages
Proposed Standard RFC
Stephen Farrell 
Jeffrey Hutzelman 
RFC 7751 (was draft-ietf-kitten-cammac)
Kerberos Authorization Data Container Authenticated by Multiple Message Authentication Codes (MACs)
2016-03
10 pages
Proposed Standard RFC
Stephen Farrell 
Benjamin Kaduk 
RFC 7802 (was draft-ietf-kitten-rfc4402bis)
A Pseudo-Random Function (PRF) for the Kerberos V Generic Security Service Application Program Interface (GSS-API) Mechanism
2016-03
8 pages
Proposed Standard RFC
Stephen Farrell 
Benjamin Kaduk 
RFC 8009 (was draft-ietf-kitten-aes-cts-hmac-sha2)
AES Encryption with HMAC-SHA2 for Kerberos 5
2016-10
19 pages
Informational RFC
Stephen Farrell 
Benjamin Kaduk 
RFC 8070 (was draft-ietf-kitten-pkinit-freshness)
Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Freshness Extension
2017-02
9 pages
Proposed Standard RFC
Stephen Farrell 
Matt Rogers 
RFC 8062 (was draft-ietf-kitten-rfc6112bis)
Anonymity Support for Kerberos
2017-02
18 pages
Proposed Standard RFC
Stephen Farrell 
Matt Rogers 
RFC 8129 (was draft-ietf-kitten-krb-auth-indicator)
Authentication Indicator in Kerberos Tickets
2017-03
6 pages
Proposed Standard RFC
Stephen Farrell 
Benjamin Kaduk 
RFC 8429 (was draft-ietf-curdle-des-des-des-die-die-die)
Deprecate Triple-DES (3DES) and RC4 in Kerberos
2018-10
10 pages
Best Current Practice RFC
Eric Rescorla 
Daniel Migault 
RFC 8636 (was draft-ietf-kitten-pkinit-alg-agility)
Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Algorithm Agility
2019-07
21 pages
Proposed Standard RFC
Benjamin Kaduk 
Robbie Harwood