Kerberos keytab encryption types

April 20, 2021

What's inside this article ⌄

Keytab encryption types list
Kerberos supported encryption types
How to list keytab encryption
Keytab encryption algorithms

Let’s imagine that we needed to determine what principles and what encryption types exist in a certain keytab. To do this, we will use the ktutil utility:

/usr/bin/ktutil

After we have entered the CLI of this utility, we type the following commands:

read_kt your_keytab.keytab
list -e

Something like this will be displayed:

slot KVNO Principal
---- ---- ---------------------------------------------------------------------
1   12               principal@REALM (aes256-cts-hmac-sha1-96)
2   12               principal@REALM (aes128-cts-hmac-sha1-96)