Data Structure
Networking
RDBMS
Operating System
Java
MS Excel
iOS
HTML
CSS
Android
Python
C Programming
C++
C#
MongoDB
MySQL
Javascript
PHP
Physics
Chemistry
Biology
Mathematics
English
Economics
Psychology
Social Studies
Fashion Studies
Legal Studies
- Selected Reading
- UPSC IAS Exams Notes
- Developer's Best Practices
- Questions and Answers
- Effective Resume Writing
- HR Interview Questions
- Computer Glossary
- Who is Who
Difference between Kerberos and SSL
What is Kerberos?
Kerberos is a computer-network confirmation system used for the proof of a user's details. In Kerberos, all the nodes communicate over an insecure network to show their identification to one another in a secure way. It uses secret-key micrography. Also, it relies on a responsible third party for validating client-server administration and demonstrating viewer's specifications.
Only trust in the Key Distribution Center(KDC) is required by the users, machines, and services using Kerberos. It dispenses two services and runs on a single method which are Authentication service and ticket-granting service. It is assembled in operating systems like Windows, Linux, Apple, etc.
What is SSL?
SSL stands for Secure Sockets Layer, which is an internet security-based protocol. The purpose of SSL is to ensure privacy, confirmation, and accurate data in internet communication. It will prevent sensitive data from hackers. Mainly prevent two systems like the server to client or server to server.
SSL encoded data that is passed on across the web to provide a high level of privacy. It also starts with a method which is known as a handshake among the two communication gadgets. Moreover, SSL virtually signs data to provide accuracy and consistency in data. SSL uses a TCP port over any other port and works on TCP protocol.
Difference between Kerberos and SSL
| Kerberos | SSL |
|---|---|
| It uses private key encryption. | While SSL uses public-key encryption. |
| Kerberos is not patented; therefore, it provides free services and is open-source software. | SSL is patented; hence, it does not provide free services. |
| Kerberos is executed in Microsoft products like Windows 2000, Windows XP, and so on. | SSL is executed on messaging, protocols like FTP, web browsing, etc. |
| It depends upon the trusted third party. | While SSL depends upon the certificate, therefore, it is asynchronous. |
| Kerberos is appropriate for WWW. | SSL is perfectly suitable and productive for the network environment. |
| Key revocation is achieved by impairing any user on the confirmation server. | Whereas in SSL key revocation needs a revocation server to get the record of the wrong certificates. |
| Passwords live in the user's minds, where they are generally not put through to personal attacks. | Certificate perch on the user's hard drive where they are exposed to being hacked. |
| Kerberos uses UDP. | SSL uses TCP. |
Working of Kerberos
Kerberos is based on trusted third-party and consistent encoding. The main suggestion of Kerberos is not to share the passwords over the network. Instead of that, a medley of the user's password is sent, connecting both sides to look over. Password is used as a solution for the conformity of encoding.
Security of the protocol depends upon the speculation that contributors have inexplicitly synchronized time. The key distribution centers (KDC) keep up with the details of the secret keys if the client or the server secret key is shared with the client or server itself or the KDC.
The client can contact the service server, and by using the TGT ticket, it is shown that it has manifested to receive the services. The client does not have to log in again and again to access the services, it is a single sign-ON system.
Conclusion
Kerberos is based on symmetric-key cryptography, and SSL is based on certificate and public-key encryption.
848 Views
