oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

krb5: add unkeyed SHA-2 checksum types

Browse Source 
Add unkeyed checksum types for SHA-256, SHA-384 and SHA-512, for future
internal use. They are assigned private (negative) checksum types and must
never appear in cleartext on the wire.
This commit is contained in:
Luke Howard
2021-09-13 17:07:13 +10:00
parent ebfd48e40a
commit 207bfc066d
4 changed files with 57 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/asn1/krb5.asn1
View File

@@ -250,7 +250,10 @@ CKSUMTYPE ::= INTEGER {
CKSUMTYPE_HMAC_SHA384_192_AES256(20),
CKSUMTYPE_GSSAPI(0x8003),
CKSUMTYPE_HMAC_MD5(-138), -- unofficial microsoft number
CKSUMTYPE_HMAC_MD5_ENC(-1138) -- even more unofficial
CKSUMTYPE_HMAC_MD5_ENC(-1138), -- even more unofficial
CKSUMTYPE_SHA256(-21),
CKSUMTYPE_SHA384(-22),
CKSUMTYPE_SHA512(-23)
}
--enctypes