XOR the last octet with 0xf0, not the first, analagous to 1-DES

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7155 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/doc/krb5-protocol/3-des.txt b/doc/krb5-protocol/3-des.txt
index 8023801a2d9d51f8d379267d0de10e11c56a4cd4..e2325e84fadf0cfce602f964e59b7b31c3d6d237 100644 (file)
--- a/doc/krb5-protocol/3-des.txt
+++ b/doc/krb5-protocol/3-des.txt
@@ -26,8 +26,8 @@ produce three DES keys sans parity.  The 168 bits are then expanded to
 include odd parity, for use within the DES routines.  The three DES keys
 are then used to encrypt themselves in 3-DES CBC mode, and the result is
 parity adjusted.  Any weak or semi-weak DES keys are first strengthened
-by eXclusive-ORing the first octet with the value 0xF0 prior to their
-use.
+by eXclusive-ORing the key with the constant 0x00000000000000F0 prior to
+its use.
 
 The n-fold operation used by the string-to-key algorithm 
 replicates the input bit array X until its length is the least common