Commit Graph

266 Commits

Author SHA1 Message Date
Love Hornquist Astrand
5a801c8f4a use krb5_data_ct_cmp 2010-11-06 20:52:53 +01:00
Simon Wilkinson
1d9072f026 krb5: reorganise crypto.c
lib/krb5/crypto.c was a large, monolithic block of code which made
it very difficult to selectively enable and disable particular
alogrithms.

Reorganise crypto.c into individual files for each encryption and
salt time, and place the structures which tie everything together
into their own file (crypto-algs.c)

Add a non-installed library (librfc3961) and test program
(test_rfc3961) which builds a minimal rfc3961 crypto library, and
checks that it is usable.
2010-11-03 11:12:24 +00:00
Love Hornquist Astrand
0a608964a4 only set error code in case of failure, add comment 2010-10-02 12:13:19 -07:00
Love Hornquist Astrand
0789271ebb indent, return error code 2010-10-02 11:59:53 -07:00
Andrew Bartlett
7ea9ccf737 heimdal: added verbose logging of hemimdal crypto errors
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-10-02 11:56:26 -07:00
Love Hornquist Astrand
856c1c0a86 accept >= 0 and valid return codes from RAND_bytes due to broken engine from the isc bind implementation, reported by Sam Liddicott 2010-09-01 21:00:07 -07:00
Asanka Herath
3a8922fe2d Change return type of checksum_type::checksum
struct checksum_type::checksum had a return value of krb5_enctype,
even though implementations returned krb5_error_code.  Change
declaration to match implementation.
2010-08-20 13:03:39 -04:00
Love Hornquist Astrand
4660ec8358 check for underruns 2010-03-21 21:05:21 -07:00
Matthias Dieter Wallnöfer
69ea9b38e9 heimdal - fix overlapped identifiers in the "krb5" library
heimdal - fix overlapped identifiers in the "krb5" library

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-03-16 10:05:35 -07:00
Russ Allbery
8a57d5cb08 Add krb5_allow_weak_crypto API to enable weak enctypes
Add krb5_allow_weak_crypto parallel to the API introduced in MIT
Kerberos 1.8.  Enables or disables all enctypes marked as weak.
Add a new enctype flag marking weak enctypes (all of the ones that
are disabled by default).

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-01-27 21:50:58 -08:00
Love Hornquist Astrand
687db64c56 Patch from Secure Endpoints/Asanka Herath for windows support 2009-12-21 08:45:28 +01:00
Love Hornquist Astrand
1f0da1963a deprecated warning 2009-11-22 16:09:46 -08:00
Love Hornquist Astrand
316fc6ff8f Simplify subkey usage for tgs-req, don't rewrite tgs-rep-sub-key keyuage for arcfour, its correct 2009-11-15 21:31:25 -08:00
Love Hornquist Astrand
a7d5b2a15e make zero_ivec unsigned 2009-09-20 22:37:27 -07:00
Love Hornquist Astrand
1b07597123 drop EVP_cts support 2009-08-25 20:29:23 -07:00
Love Hornquist Astrand
6ead770ad1 Implement CTS in terms of CBC 2009-08-25 20:26:01 -07:00
Love Hornquist Astrand
8286ff8ec4 document more 2009-08-18 18:58:53 +02:00
Love Hornquist Astrand
65f40a25c3 Always include md5, its needed for HMAC-MD5 that arcfour enctypes uses 2009-08-18 15:57:37 +02:00
Love Hornquist Astrand
4afb61a24a allow compiling out weak enctype support 2009-08-18 13:54:35 +02:00
Love Hornquist Astrand
88d55a1d06 Make compile for weak crypto global (HEIM_WEAK_CRYPTO) and use it for GSSAPI too 2009-08-17 18:06:42 +02:00
Love Hornquist Astrand
a6bfd9bb41 use constant time memcmp 2009-08-17 12:01:06 +02:00
Love Hornquist Astrand
f01ca1a10e doxygen 2009-08-14 13:46:45 +02:00
Love Hornquist Astrand
550a6c9427 doxygen fixes, include <evp-hcrypto.h> if not using openssl 2009-08-14 11:45:18 +02:00
Love Hornquist Astrand
33fcc11b3f Replace last SHA1_ with EVP_ replacement 2009-08-11 10:00:30 +02:00
Love Hornquist Astrand
18a4b69b48 Switch more cases to EVP crypto layer 2009-08-10 17:51:17 +02:00
Love Hornquist Astrand
9b710bed81 store is never read again 2009-07-29 22:37:58 +02:00
Love Hörnquist Åstrand
c99b2003e2 Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25286 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-22 17:56:41 +00:00
Love Hörnquist Åstrand
65e7108f79 use oid variable
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25235 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-28 01:17:52 +00:00
Love Hörnquist Åstrand
942a821fab remove RCSID
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25171 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-04 06:17:40 +00:00
Love Hörnquist Åstrand
628c662250 doxygen
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25150 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-27 02:42:42 +00:00
Love Hörnquist Åstrand
5e30553aca Add krb5_crypto_fx_cf2().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25147 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-27 02:19:41 +00:00
Love Hörnquist Åstrand
ccaaea0378 fix comment
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25100 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-06 02:51:05 +00:00
Love Hörnquist Åstrand
4b73e8078f use SHA_DIGEST_LENGTH
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24979 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 09:01:13 +00:00
Love Hörnquist Åstrand
f0616af047 Use blocksize instead of 16.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24946 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-25 15:37:53 +00:00
Love Hörnquist Åstrand
8082c12c88 q not used, don't increment
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24830 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:26:22 +00:00
Love Hörnquist Åstrand
9d4f21d07b only copy out padding if we had a padding buffer
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24827 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:25:52 +00:00
Love Hörnquist Åstrand
7f0f3de8ee doxygen
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24754 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:43 +00:00
Love Hörnquist Åstrand
e8eb837b41 doxygen
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24753 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:32 +00:00
Love Hörnquist Åstrand
4ed2490144 Verify checksum.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24752 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:21 +00:00
Love Hörnquist Åstrand
8acbbf8edf simplify now that there is only one data buffer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24751 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:08 +00:00
Love Hörnquist Åstrand
dcb75ee170 Only one DATA buffer for _iov functions.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24750 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:12:55 +00:00
Love Hörnquist Åstrand
7614f9aca1 move out some deprecated functions
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24305 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:52:37 +00:00
Love Hörnquist Åstrand
a6fcb85344 doxygen fixup
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24273 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:47:24 +00:00
Love Hörnquist Åstrand
c25af51232 make paranoia check less paranoid
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24245 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:42:52 +00:00
Love Hörnquist Åstrand
c6e9b9cabc simplify
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24207 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-18 04:59:34 +00:00
Love Hörnquist Åstrand
28de60a9bc stricter check that enctype matches checksum type when using keyed checksum
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24205 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-15 04:32:59 +00:00
Love Hörnquist Åstrand
242139b224 plug memory leak
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24157 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:09:28 +00:00
Love Hörnquist Åstrand
554655b628 call cleanup callback on free schedule in setup
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24155 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:09:08 +00:00
Love Hörnquist Åstrand
a77294556d return error when we cant find enctype, cid#59
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24136 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:05:53 +00:00
Love Hörnquist Åstrand
c96c9b0ced check that valid enctypes are not 0, cid#29
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24118 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:02:43 +00:00