Explain Kerberos like I'm 5

Post on 05-Dec-2014

1.186 views 2 download

description

Slides are meant to be paired with the blog post: http://www.roguelynn.com/words/explain-like-im-5-kerberos

Transcript of Explain Kerberos like I'm 5

Authentication Server

Ticket GrantingServer

Key Distribution Center

Kerberos Realm

HTTPservice

You

KDC Clients

Monday, April 1, 13

your ID, Ticket Granting Server ID, IP address, lifetime

YouAuthentication

Server

plaintext request

Monday, April 1, 13

user IDlookup in KDC

YouAuthentication

Server

Monday, April 1, 13

Ticket Granting Server Session Key

Ticket Granting Ticket

HTTP service’s ID, timestamp, lifetime, TGS Session Key

your ID, HTTP service ID, IP address, timestamp, lifetime, and the TGS Session Key

YouAuthentication

Server

Monday, April 1, 13

Ticket Granting Server Session Key

Ticket Granting Ticket

Your Secret Key

Ticket Granting Server Secret Key

YouAuthentication

Server

Monday, April 1, 13

Authenticator

Ticket Granting Ticket

your ID and timestamp

your ID, HTTP service ID, IP address, timestamp, lifetime, and the TGS Session Key

You

HTTP Service ID and lifetimeplaintext request

Ticket GrantingServer

Monday, April 1, 13

You

user IDlookup in KDC

Ticket GrantingServer

Monday, April 1, 13

Authenticator

Ticket Granting TicketTicket Granting Server Secret Key

Ticket Granting Server Session Key

YouTicket Granting

Server

plaintext request

Monday, April 1, 13

HTTP Service Session Key

Ticket for HTTP Service

your client ID and timestamp

YouTicket Granting

Server

your ID, HTTP service ID, IP address, timestamp, lifetime, and the TGS Session Key

Monday, April 1, 13

HTTP Service Session Key

Ticket for HTTP ServiceHTTP Service Secret Key

Ticket Granting Server Session Key

YouTicket Granting

Server

Monday, April 1, 13

Ticket for HTTP Serviceyour ID, HTTP service ID, IP address,

timestamp, lifetime, and the TGS Session Key

Authenticatoryour client ID and timestamp

HTTPservice

You

Monday, April 1, 13

Authenticator

HTTP Service Secret Key

HTTP Service Session Key

HTTPservice

You

Ticket for HTTP Service

Monday, April 1, 13

AuthenticatorHTTP service ID and timestamp

You

HTTPservice

Monday, April 1, 13

AuthenticatorYou

HTTPservice

HTTP Service Session Key

Monday, April 1, 13

You

HTTPservice

Monday, April 1, 13