6. Kerberos.ppt
- 1. Authentication Services • Kerberos – A Private-key Authentication Service • X.509 directory authentication service
- 2. Threats in a distributed environment • Distributed computing model, client/server • A user gains access to a WS, and pretend to be another • A user alters the network address of a WS to impersonate another WS • A user eavesdrops and uses a replay to gain entrance or disrupt operations
- 3. Kerberos • Trusted key server system from MIT • Provides centralised private-key third-party authentication in a distributed network – Allows users access to services distributed through network – Without needing to trust all workstations – Rather all trust a central authentication server – Efficiency • Two versions in use: 4 & 5
- 4. Kerberos Requirements • First published report identified its requirements as: – security – reliability – transparency – scalability • Implemented using an authentication protocol based on Needham-Schroeder • A pure private-key scheme
- 5. A 3-step improvements leading to Kerberos V4 • A simple authentication dialogue – Has to enter password for each server – Plaintext transmission of password • AS+TGS model – Enter the password once for multiple services – Difficulty in choosing lifetime • V4 model – Use private session keys – Can also verify server – AS is the KDC for (C, TGS) – TGS is the KDC for (C, V)
- 6. I. A Simple Authentication Dialogue
- 8. Analysis of Simple Authentication Dialogue • The Ticket is encrypted to prevent alteration or forgery. • The Server ID is included in the Ticket so that the server can verify that it has decrypted the correct ticket. • By including the network address ADc masquerade is not possible Limitations – Has to enter password for each server egs:Mail server, File server, Print Server – Plaintext transmission of password-Eavesdropper to capture password
- 9. II. A More Secure Authentication Dialogue
- 11. Analysis of More Secure Authentication Dialogue Limitations • An opponent could eavesdrop on the network and capture a copy of the ticket-granting ticket and then wait for the legitimate user to log out. Then the opponent could forge the legitimate user's network address and files available to the Legitimate user • Opponent captures a service-granting ticket and uses it before it expires, the opponent has access to the corresponding service • Servers to authenticate themselves to users. Otherwise false server would then be in a position to act as a real server and capture any information from the user and deny the true service to the user.
- 12. Additional Requirements: • A network service (the TGS or an application service) mustbe able to prove that the person using a ticket is the same person to whom that ticket was issued. • Servers to authenticate themselves to users..
- 13. Kerberos 4 Overview • A basic third-party authentication scheme • Have an Authentication Server (AS) – users initially negotiate with AS to identify self – AS provides a authentication credential (ticket granting ticket TGT) • Have a Ticket Granting server (TGS) – users subsequently request access to other services from TGS on basis of users TGT
- 16. Kerberos Realms • a Kerberos environment consists of: – a Kerberos server – a number of clients, all registered with server – application servers, sharing keys with server • this is termed a realm – typically a single administrative domain • Inter-realm authentication possible – Mutual trust required
- 18. X.509 Version 3 • has been recognised that additional information is needed in a certificate – email/URL, policy details, usage constraints • rather than explicitly naming new fields defined a general extension method • extensions consist of: – extension identifier – criticality indicator – extension value
- 19. Certificate Extensions • key and policy information – convey info about subject & issuer keys, plus indicators of certificate policy • certificate subject and issuer attributes – support alternative names, in alternative formats for certificate subject and/or issuer • certificate path constraints – allow constraints on use of certificates by other CA’s