oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Add some master key support functions.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3364 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Johan Danielsson
1997-09-03 18:19:15 +00:00
parent bbafb91f6c
commit 91ee962df4
1 changed files with 42 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

48
lib/hdb/hdb.c
View File

@@ -94,11 +94,47 @@ hdb_etype2key(krb5_context context,
return hdb_next_etype2key(context,e, etype, key);
}
/* this is really ugly, bus has to be this way until the crypto
framework gets fixed */
/* this is a bit ugly, but will get better when the crypto framework
gets fixed */
krb5_error_code
hdb_process_master_key(krb5_context context, EncryptionKey key,
krb5_data *schedule)
{
if(key.keytype != KEYTYPE_DES)
return KRB5_PROG_KEYTYPE_NOSUPP;
schedule->length = sizeof(des_key_schedule);
schedule->data = malloc(schedule->length);
des_set_key((des_cblock*)key.keyvalue.data, schedule->data);
return 0;
}
krb5_error_code
hdb_read_master_key(krb5_context context, const char *filename,
EncryptionKey *key)
{
FILE *f;
unsigned char buf[256];
size_t len;
krb5_error_code ret;
if(filename == NULL)
filename = HDB_DB_DIR "/m-key";
f = fopen(filename, "r");
if(f == NULL)
return errno;
len = fread(buf, 1, sizeof(buf), f);
if(ferror(f))
ret = errno;
else
ret = decode_EncryptionKey(buf, len, key, &len);
fclose(f);
memset(buf, 0, sizeof(buf));
return ret;
}
Key *
hdb_unseal_key(Key *key, des_key_schedule master_key)
hdb_unseal_key(Key *key, krb5_data schedule)
{
des_cblock iv;
int num = 0;
@@ -110,12 +146,12 @@ hdb_unseal_key(Key *key, des_key_schedule master_key)
des_cfb64_encrypt(key->key.keyvalue.data,
new_key->key.keyvalue.data,
key->key.keyvalue.length,
master_key, &iv, &num, 0);
schedule.data, &iv, &num, 0);
return new_key;
}
void
hdb_seal_key(Key *key, des_key_schedule master_key)
hdb_seal_key(Key *key, krb5_data schedule)
{
des_cblock iv;
int num = 0;
@@ -124,7 +160,7 @@ hdb_seal_key(Key *key, des_key_schedule master_key)
des_cfb64_encrypt(key->key.keyvalue.data,
key->key.keyvalue.data,
key->key.keyvalue.length,
master_key, &iv, &num, 1);
schedule.data, &iv, &num, 1);
}
void