RFC 3645:Generic Security Service Algorithm for ...

RFC-Ref

Previous | Next

Frontpage | Contents | Keywords

Generic Security Service Algorithm for Secret Key Transaction Authentication for DNS (GSS-TSIG)

1. Introduction

2. Algorithm Overview

2.1. GSS Details

2.2. Modifications to the TSIG protocol (RFC 2845)

3. Client Protocol Details

3.1. Negotiating Context

3.1.1. Call GSS_Init_sec_context

3.1.2. Send TKEY Query to Server

3.1.3. Receive TKEY Query-Response from Server

3.1.3.1. Value of major_status == GSS_S_COMPLETE

3.1.3.2. Value of major_status == GSS_S_CONTINUE_NEEDED

3.2. Context Established

3.2.1. Terminating a Context

4. Server Protocol Details

4.1. Negotiating Context

4.1.1. Receive TKEY Query from Client

4.1.2. Call GSS_Accept_sec_context

4.1.3. Send TKEY Query-Response to Client

4.2. Context Established

4.2.1. Terminating a Context

5. Sending and Verifying Signed Messages

5.1. Sending a Signed Message - Call GSS_GetMIC

5.2. Verifying a Signed Message - Call GSS_VerifyMIC

6. Example usage of GSS-TSIG algorithm

7. Security Considerations

8. IANA Considerations

10. Intellectual Property Statement

11. Acknowledgements

12.1. Normative References

12.2. Informative References

13. Authors' Addresses

14. Full Copyright Statement

15. Acknowledgement

Previous | Next

Frontpage | Contents | Keywords

RFC-Ref.org

Sister Sites

Chess-Ref.org
Law-Ref.org
InChI.info
Zvon.org