Kerberos5协议的安全分析

Security Analysis of Kerberos 5 Protocol

Kerberos协议是一个被广泛采用的、基于可信任第三方提供安全认证服务的网络认证协议。利用共享的会话密钥，Kerberos协议保证了通信的机密性和完整性。描述了Kerberos5协议最新版本的基本原理，介绍了协议的详细过程，通过对比前一版本，分析了其改进之处和仍存在的不足。

Kerberos is a widely-adopted network authentication protocol, which provides secure authentication service based on the trusted third-party. By exploiting a shared key, Kerberos ensures the confidentiality and integrity for a session. This paper describes the basic prin- ciples of the newly- issued version, introduces the detailed procedure of the protocol and by being compared with the previous version, analyze the improvement and faults of Kerberos 5.