Question about cryptography?

Question

Does Kerberos TGS server know workstation user's password?

What encryption key uses sender of the symmetric key?

Answer 1

1) No (at least not if it's configured correctly).

It stores a 'hash' value which is the result ('answer') after processing the password in a complex (and non-reversible) way .

(an example of a non-reversible operation would be to divide by 2 and then save (as the 'hash' value) ONLY the last digit whilst ignoring any fraction. So if the 'hash' answer is '1', the 'original' password might have been 2 or 3 (or 22 or 23 ...).. of course its a lot more complex than that)



2) The Sender first encrypts the message using their OWN Private key, and then encrypts the (already encrypted) message again using the recipients Public key.

When the recipient gets the message, they first decrypt using their Private key. Only the receiver can complete this step correctly, because only the receiver has the Private key.

Next the receiver decrypts using the SENDERS Public key. If the message comes out OK, then this means it MUST have come from the sender, because ONLY the sender could have used their Private key to create the message.