oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Just use RAND_bytes() for generating random bytes

Browse Source
This commit is contained in:
Love Hornquist Astrand
2009-10-06 06:00:24 -07:00
parent d934c249f9
commit ceac2815bb
1 changed files with 6 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
lib/krb5/generate_seq_number.c
View File

@@ -38,23 +38,11 @@ krb5_generate_seq_number(krb5_context context,
const krb5_keyblock *key,
uint32_t *seqno)
{
krb5_error_code ret;
krb5_keyblock *subkey;
uint32_t q;
u_char *p;
int i;
ret = krb5_generate_subkey (context, key, &subkey);
if (ret)
return ret;
q = 0;
for (p = (u_char *)subkey->keyvalue.data, i = 0;
i < subkey->keyvalue.length;
++i, ++p)
q = (q << 8) | *p;
q &= 0xffffffff;
*seqno = q;
krb5_free_keyblock (context, subkey);
if (RAND_bytes((void *)seqno, sizeof(*seqno)) != 1)
krb5_abortx(context, "Failed to generate random block");
/* MIT used signed numbers, lets not stomp into that space directly */
*seqno &= 0x3fffffff;
if (*seqno == 0)
*seqno = 1;
return 0;
}