Extensible Pre-Authentication in Kerberos (EPAK)
Extensible Pre-Authentication in Kerberos (EPAK) is a Kerberos extension that enables many authentication methods to be loosely coupled with Kerberos, without further modification to Kerberos.
EPAK will be presented at the 23rd Annual Computer Security Applications Conference (ACSAC).