Kerberos

E191937

Kerberos is a network authentication protocol that uses secret-key cryptography to securely verify the identity of users and services in distributed systems.

All labels observed (6)

Label Occurrences
Kerberos canonical 13
Kerberos V5 protocol specification 1
Kerberos version 4 1

How this entity was disambiguated

Statements (49)

Predicate Object
instanceOf authentication protocol
network authentication protocol
security protocol
basedOn symmetric-key cryptography
canUse public-key cryptography extensions
category computer security
commonlyUsedIn Active Directory
Linux systems
linked to: Linux ecosystem

Microsoft Windows domains
UNIX systems
enterprise networks
currentMajorVersion Kerberos version 5
linked to: Kerberos
designedFor client-server model
distributed systems
secure network authentication
developedAt Massachusetts Institute of Technology
developedBy MIT Project Athena
doesNotUse public-key cryptography by default
hasComponent Authentication Server
Key Distribution Center
Ticket Granting Server
linked to: Kerberos
influenced modern single sign-on systems
namedAfter Cerberus from Greek mythology
originallyDevelopedIn 1980s
provides confidentiality
integrity
replay protection
reliesOn shared secret keys
trusted third party
requires synchronized clocks
specifiedIn Kerberos V5 protocol specification
linked to: Kerberos
standardizedAs RFC 4120
standardizedBy IETF
supersededVersion Kerberos version 4
linked to: Kerberos
supports cross-realm authentication
mutual authentication
single sign-on
threatModel eavesdropping
password guessing attacks
replay attacks
transportProtocol TCP
UDP
uses authenticators
secret-key cryptography
session keys
ticket-granting tickets
tickets
time-stamps
usesDefaultPort 88

How these facts were elicited

Referenced by (18)

Full triples — surface form annotated when it differs from this entity's canonical label.

NFS authenticationMechanism Kerberos
SMB authenticationMethod NTLM
linked to: Kerberos
SMB authenticationMethod Kerberos
fetchmail supportsProtocol Kerberos
Thunderbird supportsAuthentication Kerberos
subject linked to: Thunderbird email client
Kerberos hasComponent Ticket Granting Server
linked to: Kerberos
Kerberos currentMajorVersion Kerberos version 5
linked to: Kerberos
Kerberos supersededVersion Kerberos version 4
linked to: Kerberos
Kerberos specifiedIn Kerberos V5 protocol specification
linked to: Kerberos
Samba supportsAuthentication Kerberos
NTLM weakerThan Kerberos
NTLM recommendedReplacedBy Kerberos
MongoDB supportsAuthenticationMechanism Kerberos
subject linked to: MongoDB database