Request for Weak Kerberos Encryption

During authentication, Kerberos encryption types (etypes) are exchanged between a client and a server, such as a domain controller (DC). Etypes influence which algorithms a DC selects to encrypt Kerberos tickets that contain credentials. By default, the latest versions of Windows disable support for weak cipher algorithms. On clients and servers having support for weak algorithms enabled, an attacker can submit an authentication Kerberos request containing a weak etype, which might result in a weakly encrypted Kerberos ticket. Sophisticated attackers can perform AS-REP roasting or other attacks to harvest credentials from weakly encrypted tickets.