Subject: re: Passwords

From: Don Mitchell <[email-masked]>
Date: Fri, 15 Oct 1993 01:05:03 -0700

Kerberos is not a zero-knowledge protocol.  An evesdropper sees a
string and the string encrypted by the users password, and that reviews
information about the password.  True zero-knowledge protocols obey a
stronger condition.

With regard to Kerberos, check out "Limitations of the Kerberos
Authentication System" by Bellovin and Merritt in USENIX Winter '91.