Remove des3 and arcfour from supported_enctypes

The des3 and arcfour (rc4) enctypes use weak string-to-key algorithms,
and should not be used for producing password-derived keys.

ticket: 7903

diff --git a/src/include/osconf.hin b/src/include/osconf.hin
index 6f28bc3d695ff65a3855bbbc97e7ee6db49795b7..922d7960f1653f42c41562706cf9fdd39528f9f3 100644 (file)
--- a/src/include/osconf.hin
+++ b/src/include/osconf.hin
@@ -101,8 +101,7 @@
 
 #define KRB5_DEFAULT_SUPPORTED_ENCTYPES                 \
     "aes256-cts-hmac-sha1-96:normal "                   \
-    "aes128-cts-hmac-sha1-96:normal "                   \
-    "des3-cbc-sha1:normal arcfour-hmac-md5:normal"
+    "aes128-cts-hmac-sha1-96:normal"
 
 #define MAX_DGRAM_SIZE  65536