Kerberos is an authentication protocol under RFC 1510, integrated in Windows operating systems from the beginning of this millennium. It was developed by the Massachusetts Institute of Technology (MIT) under the Athena Project. You can check it and test it via its official website, http://www.kerberos.org. The Kerberos environment contains three parts: the client, the server, and the Key Distribution Center (KDC), as shown in the following figure. It provides identity-based on a key distribution model, presented by Needham and Schroeder:
Kerberos needs the following five steps to proceed:
- Authentication is requested from the authentication server, KDC
- KDC sends back a session encrypted with the sender’s secret key, in addition to the ticket-granting encrypted with a ticket-granting service
- The receiver then decrypts the session and requests permission...