Love Hornquist Astrand
5a801c8f4a
use krb5_data_ct_cmp
2010-11-06 20:52:53 +01:00
Simon Wilkinson
1d9072f026
krb5: reorganise crypto.c
...
lib/krb5/crypto.c was a large, monolithic block of code which made
it very difficult to selectively enable and disable particular
alogrithms.
Reorganise crypto.c into individual files for each encryption and
salt time, and place the structures which tie everything together
into their own file (crypto-algs.c)
Add a non-installed library (librfc3961) and test program
(test_rfc3961) which builds a minimal rfc3961 crypto library, and
checks that it is usable.
2010-11-03 11:12:24 +00:00
Love Hornquist Astrand
0a608964a4
only set error code in case of failure, add comment
2010-10-02 12:13:19 -07:00
Love Hornquist Astrand
0789271ebb
indent, return error code
2010-10-02 11:59:53 -07:00
Andrew Bartlett
7ea9ccf737
heimdal: added verbose logging of hemimdal crypto errors
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-10-02 11:56:26 -07:00
Love Hornquist Astrand
856c1c0a86
accept >= 0 and valid return codes from RAND_bytes due to broken engine from the isc bind implementation, reported by Sam Liddicott
2010-09-01 21:00:07 -07:00
Asanka Herath
3a8922fe2d
Change return type of checksum_type::checksum
...
struct checksum_type::checksum had a return value of krb5_enctype,
even though implementations returned krb5_error_code. Change
declaration to match implementation.
2010-08-20 13:03:39 -04:00
Love Hornquist Astrand
4660ec8358
check for underruns
2010-03-21 21:05:21 -07:00
Matthias Dieter Wallnöfer
69ea9b38e9
heimdal - fix overlapped identifiers in the "krb5" library
...
heimdal - fix overlapped identifiers in the "krb5" library
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-03-16 10:05:35 -07:00
Russ Allbery
8a57d5cb08
Add krb5_allow_weak_crypto API to enable weak enctypes
...
Add krb5_allow_weak_crypto parallel to the API introduced in MIT
Kerberos 1.8. Enables or disables all enctypes marked as weak.
Add a new enctype flag marking weak enctypes (all of the ones that
are disabled by default).
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-01-27 21:50:58 -08:00
Love Hornquist Astrand
687db64c56
Patch from Secure Endpoints/Asanka Herath for windows support
2009-12-21 08:45:28 +01:00
Love Hornquist Astrand
1f0da1963a
deprecated warning
2009-11-22 16:09:46 -08:00
Love Hornquist Astrand
316fc6ff8f
Simplify subkey usage for tgs-req, don't rewrite tgs-rep-sub-key keyuage for arcfour, its correct
2009-11-15 21:31:25 -08:00
Love Hornquist Astrand
a7d5b2a15e
make zero_ivec unsigned
2009-09-20 22:37:27 -07:00
Love Hornquist Astrand
1b07597123
drop EVP_cts support
2009-08-25 20:29:23 -07:00
Love Hornquist Astrand
6ead770ad1
Implement CTS in terms of CBC
2009-08-25 20:26:01 -07:00
Love Hornquist Astrand
8286ff8ec4
document more
2009-08-18 18:58:53 +02:00
Love Hornquist Astrand
65f40a25c3
Always include md5, its needed for HMAC-MD5 that arcfour enctypes uses
2009-08-18 15:57:37 +02:00
Love Hornquist Astrand
4afb61a24a
allow compiling out weak enctype support
2009-08-18 13:54:35 +02:00
Love Hornquist Astrand
88d55a1d06
Make compile for weak crypto global (HEIM_WEAK_CRYPTO) and use it for GSSAPI too
2009-08-17 18:06:42 +02:00
Love Hornquist Astrand
a6bfd9bb41
use constant time memcmp
2009-08-17 12:01:06 +02:00
Love Hornquist Astrand
f01ca1a10e
doxygen
2009-08-14 13:46:45 +02:00
Love Hornquist Astrand
550a6c9427
doxygen fixes, include <evp-hcrypto.h> if not using openssl
2009-08-14 11:45:18 +02:00
Love Hornquist Astrand
33fcc11b3f
Replace last SHA1_ with EVP_ replacement
2009-08-11 10:00:30 +02:00
Love Hornquist Astrand
18a4b69b48
Switch more cases to EVP crypto layer
2009-08-10 17:51:17 +02:00
Love Hornquist Astrand
9b710bed81
store is never read again
2009-07-29 22:37:58 +02:00
Love Hörnquist Åstrand
c99b2003e2
Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25286 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-22 17:56:41 +00:00
Love Hörnquist Åstrand
65e7108f79
use oid variable
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25235 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-28 01:17:52 +00:00
Love Hörnquist Åstrand
942a821fab
remove RCSID
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25171 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-04 06:17:40 +00:00
Love Hörnquist Åstrand
628c662250
doxygen
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25150 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-27 02:42:42 +00:00
Love Hörnquist Åstrand
5e30553aca
Add krb5_crypto_fx_cf2().
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25147 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-27 02:19:41 +00:00
Love Hörnquist Åstrand
ccaaea0378
fix comment
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25100 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-06 02:51:05 +00:00
Love Hörnquist Åstrand
4b73e8078f
use SHA_DIGEST_LENGTH
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24979 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 09:01:13 +00:00
Love Hörnquist Åstrand
f0616af047
Use blocksize instead of 16.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24946 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-25 15:37:53 +00:00
Love Hörnquist Åstrand
8082c12c88
q not used, don't increment
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24830 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:26:22 +00:00
Love Hörnquist Åstrand
9d4f21d07b
only copy out padding if we had a padding buffer
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24827 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:25:52 +00:00
Love Hörnquist Åstrand
7f0f3de8ee
doxygen
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24754 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:43 +00:00
Love Hörnquist Åstrand
e8eb837b41
doxygen
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24753 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:32 +00:00
Love Hörnquist Åstrand
4ed2490144
Verify checksum.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24752 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:21 +00:00
Love Hörnquist Åstrand
8acbbf8edf
simplify now that there is only one data buffer.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24751 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:08 +00:00
Love Hörnquist Åstrand
dcb75ee170
Only one DATA buffer for _iov functions.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24750 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:12:55 +00:00
Love Hörnquist Åstrand
7614f9aca1
move out some deprecated functions
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24305 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:52:37 +00:00
Love Hörnquist Åstrand
a6fcb85344
doxygen fixup
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24273 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:47:24 +00:00
Love Hörnquist Åstrand
c25af51232
make paranoia check less paranoid
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24245 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:42:52 +00:00
Love Hörnquist Åstrand
c6e9b9cabc
simplify
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24207 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-18 04:59:34 +00:00
Love Hörnquist Åstrand
28de60a9bc
stricter check that enctype matches checksum type when using keyed checksum
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24205 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-15 04:32:59 +00:00
Love Hörnquist Åstrand
242139b224
plug memory leak
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24157 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:09:28 +00:00
Love Hörnquist Åstrand
554655b628
call cleanup callback on free schedule in setup
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24155 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:09:08 +00:00
Love Hörnquist Åstrand
a77294556d
return error when we cant find enctype, cid#59
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24136 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:05:53 +00:00
Love Hörnquist Åstrand
c96c9b0ced
check that valid enctypes are not 0, cid#29
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24118 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:02:43 +00:00