Kerberos Encryption Types
Decimal Value | Hex Value | Supported Encryption Types | Description |
---|---|---|---|
0 | 0x0 | Not defined – defaults to RC4_HMAC_MD5 | |
1 | 0x1 | DES_CBC_CRC | Disabled by default starting from Windows 7 and Windows Server 2008 R2 |
2 | 0x2 | DES_CBC_MD5 | |
3 | 0x3 | DES_CBC_CRC, DES_CBC_MD5 | Disabled by default starting from Windows 7 and Windows Server 2008 R2 |
4 | 0x4 | RC4 | |
5 | 0x5 | DES_CBC_CRC, RC4 | |
6 | 0x6 | DES_CBC_MD5, RC4 | |
7 | 0x7 | DES_CBC_CRC, DES_CBC_MD5, RC4 | |
8 | 0x8 | AES 128 | |
9 | 0x9 | DES_CBC_CRC, AES 128 | |
10 | 0xA | DES_CBC_MD5, AES 128 | |
11 | 0xB | DES_CBC_CRC, DES_CBC_MD5, AES 128 | |
12 | 0xC | RC4, AES 128 | |
13 | 0xD | DES_CBC_CRC, RC4, AES 128 | |
14 | 0xE | DES_CBC_MD5, RC4, AES 128 | |
15 | 0xF | DES_CBC_CBC, DES_CBC_MD5, RC4, AES 128 | |
16 | 0x10 | AES 256 | |
17 | 0x11 | DES_CBC_CRC, AES 256 | Supported starting from Windows Server 2008 and Windows Vista |
18 | 0x12 | DES_CBC_MD5, AES 256 | Supported starting from Windows Server 2008 and Windows Vista |
19 | 0x13 | DES_CBC_CRC, DES_CBC_MD5, AES 256 | |
20 | 0x14 | RC4, AES 256 | |
21 | 0x15 | DES_CBC_CRC, RC4, AES 256 | |
22 | 0x16 | DES_CBC_MD5, RC4, AES 256 | |
23 | 0x17 | DES_CBC_CRC, DES_CBC_MD5, RC4, AES 256 | Default suite for operating systems before Windows Server 2008 and Windows Vista |
24 | 0x18 | AES 128, AES 256 | Default suite for operating systems before Windows Server 2008 and Windows Vista |
25 | 0x19 | DES_CBC_CRC, AES 128, AES 256 | |
26 | 0x1A | DES_CBC_MD5, AES 128, AES 256 | |
27 | 0x1B | DES_CBC_MD5, DES_CBC_MD5, AES 128, AES 256 | |
28 | 0x1C | RC4, AES 128, AES 256 | |
29 | 0x1D | DES_CBC_CRC, RC4, AES 128, AES 256 | |
30 | 0x1E | DES_CBC_MD5, RC4, AES 128, AES 256 | |
31 | 0x1F | DES_CBC_CRC, DES_CBC_MD5, RC4-HMAC, AES128-CTS-HMAC-SHA1-96, AES256-CTS-HMAC-SHA1-96 | |
0xFFFFFFFF or 0xffffffff | – | This type shows in Audit Failure events |