The Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Mechanism: Version 2. - Larry Zhu; Karthik Jaganathan; Sam Hartman (RFC, 2005)

The Simple and Protected Generic Security Service Application Program Interface (GSS-API) Negotiation Mechanism. - Larry Zhu; Paul J. Leach; Karthik Jaganathan; Wyllys Ingersol (RFC, 2005)

Kerberos Cryptosystem Negotiation Extension. - Larry Zhu; Paul J. Leach; Karthik Jaganathan (RFC, 2006)

Public Key Cryptography for Initial Authentication in Kerberos (PKINIT). - Larry Zhu; Brian Tung (RFC, 2006)

Online Certificate Status Protocol (OCSP) Support for Public Key Cryptography for Initial Authentication in Kerberos (PKINIT). - Larry Zhu; Karthik Jaganathan; Nicolas Williams (RFC, 2006)

SPNEGO-based Kerberos and NTLM HTTP Authentication in Microsoft Windows. - Karthik Jaganathan; Larry Zhu; John Brezak (RFC, 2006)

The RC4-HMAC Kerberos Encryption Types Used by Microsoft Windows. - Karthik Jaganathan; Larry Zhu; John Brezak (RFC, 2006)

Elliptic Curve Cryptography (ECC) Support for Public Key Cryptography for Initial Authentication in Kerberos (PKINIT). - Larry Zhu; Karthik Jaganathan; Kristin E. Lauter (RFC, 2008)

Channel Bindings for TLS. - Jeffrey E. Altman; Nicolas Williams; Larry Zhu (RFC, 2010)

Additional Kerberos Naming Constraints. - Larry Zhu (RFC, 2011)

Anonymity Support for Kerberos. - Larry Zhu; Paul J. Leach; Sam Hartman (RFC, 2011)

A Generalized Framework for Kerberos Pre-Authentication. - Sam Hartman; Larry Zhu (RFC, 2011)

Kerberos Principal Name Canonicalization and Cross-Realm Referrals. - Sam Hartman; Kenneth Raeburn; Larry Zhu (RFC, 2012)

Anonymity Support for Kerberos. - Larry Zhu; Paul J. Leach; Sam Hartman; Shawn Emery (RFC, 2017)

Public Key Cryptography for Initial Authentication in Kerberos (PKINIT) Algorithm Agility. - Love Hörnquist-Åstrand; Larry Zhu; Margaret Cullen; Greg Hudson (RFC, 2019)