In the Kerberos V5 dialogue message (2), when the AS responds to Client request, it contains a ticket named Tickettgs. Which one of the following is true about this ticket?

a. The Client can decrypt the Ticket using its master key KC.

b. The Client can decrypt the Ticket using its session key KC,tgs

c. The Client cannot decrypt the Ticket

d. The Client can decrypt the key with TGS key Ktgs

sol100:

In the Kerberos V5 dialogue message (2), when the AS responds to Client request, it contains a ticket named Tickettgs. The correct answer is (d) the Client can decrypt the key with TGS key Ktgs. The Tickettgs contains the session key for communication with the TGS, encrypted with the TGS key. The Client can decrypt the session key using the TGS key, which it obtained from the KDC.