3 ms·

Which implementation was this? Does the code linger somewhere?

• schoen 3y ago
  Probably this one? https://kerberos.org/dist/historic.html#CNS https://kerberos.org/dist/historic.html#CNS
  • gumby 3y ago
    Looks like it.
    • eichin 3y ago
      Not that the original article has anything to do with Kerberos other than design-by-analogy (not to knock the article, it's describing an interesting thing, and I'm always up for 90s nostalgia regardless of cause :-) but I think that version was more "MIT figured out that the change from ITAR to BXA and the published-code category made it reasonably safe for them to put anything up with a warning and possibly a registration". (CNS is the v4 release we shipped, which mostly got folded back in as an MIT krb4 patch release as well; we then shipped KerbNet which was V5 based, until we dropped the project entirely.)
      • gumby 3y ago
        Mark, you probably remember this project from your time at Cygnus and maybe you even were involved in it? I sorry I can't remember any more. As we both know MIT gets away with a lot simply due to its deep interdependence with literally every department in the federal government.
        • eichin 3y ago
          Yeah, I went to Switzerland in one of your followup trips to meet with the arms-length-contract cryptographers. (Which was legal at the time, but a loophole that got closed a year or two later because Sun's "ELVIS+" project for funding a russian team to do non-US crypto got too much attention...)