A protocol that defines the use of public key cryptography for initial authentication in Kerberos.