The Kerberos authentication system, a part of MIT's Project Athena, has been adopted by other organizations. Despite Kerberos's many strengths, it has a number of limitations and some weaknesses. Some are due to specifics of the MIT environment; others represent deficiencies in the protocol design. We discuss a number of such problems, and present solutions to some of them. We also demonstrate how special-purpose cryptographic hardware may be needed in some cases.
No takes yet. Share an insight, caveat, or question.
Bellovin et al. (1990) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: