1992-12-08 "Limitations of the Kerberos Authentication System" Steven M. Bellovin & Michael Merrit, AT&T Bell Labs