Kerberos (protocol)
Once the client receives messages A and B, it decrypts message A to obtain the Client/TGS Session Key. This session key is used for further communications with TGS. At this point, the client has enough information to authenticate itself to the TGS.Note: The client cannot decrypt Message B, as it is encrypted using TGS's secret key.