Multiple choice

Which of the following statements is false about client authentication in Kerberos protocol?

  1. Client session key is encrypted using the secret key.

  2. 'Ticket-Granting-Ticket' is encrypted using the secret key of the TGS.

  3. AS (Authenticated Server) checks to see if the client is in its database.

  4. The secret is generated by AS.

  5. The client decrypts the confirmation using the client/server session key.

Reveal answer Fill a bubble to check yourself
E Correct answer
Explanation

The client does not decrypt the session key.