Forum Discussion
Add support for sha-2 and sha3 in Supported Kerberos Encryption Types
https://web.mit.edu/kerberos/krb5-devel/doc/admin/enctypes.html#enctype-compatibility
It seems like `aes128-cts-hmac-sha256-128` and `aes256-cts-hmac-sha384-192` are supported by other Kerberos implimentations, but not yet supported by Windows Server.
Can those be added to Windows Server?
Also can you please think about adding sha-3 based ones too?
3 Replies
- aes128-cts-hmac-sha256-128 and aes256-cts-hmac-sha384-192 is coming with Windows Server 2025.
https://learn.microsoft.com/en-us/windows-server/get-started/whats-new-windows-server-2025Why is aes128-cts-hmac-sha256-128 and aes256-cts-hmac-sha384-192 Kerberos encryption types no longer listed at https://learn.microsoft.com/en-us/windows-server/get-started/whats-new-windows-server-2025 ? Did it not make it in to Windows Server 2025?
I'm at MS Ignite now, and I asked the team.
They didn't make it in time for GA, but they say, it will come to WS2025, some time in 2025.
