01993e8d76
remove to strict usage
2011-07-24 20:24:38 -07:00
2e8b550e7b
punt if caller passed us a crypto object, we didn't find a keyed checksum type
2011-07-24 20:24:37 -07:00
8060a561db
switch to KRB5_ENCTYPE
2011-07-24 16:02:22 -07:00
f60ec15834
partly unify enctype/keytype since there is only enctypes
2011-07-24 14:03:08 -07:00
f79183821f
sprinkle doxygen and kode more like the rest of the code base
2011-07-19 21:29:19 -07:00
3ef06de67b
Fix a couple of bugs in krb5_c_valid_enctype():
...
1. on errors, it appears to core dump, and
2. the sense of the return code is inverted from the
MIT implementation.
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2011-07-19 21:25:15 -07:00
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
305596d9ad
Rename subsystem_DEPRECATED to subsystem_DEPRECATED_FUNCTION(X)
...
Start to explain what the replacement function is.
Generate the #define/#undef logic in generated header files.
Use gcc style where the deprecation warning is after the prototype.
2011-05-17 23:12:51 -07:00
f5f9014c90
Warning fixes from Christos Zoulas
...
- shadowed variables
- signed/unsigned confusion
- const lossage
- incomplete structure initializations
- unused code
2011-04-29 20:25:05 -07:00
1bb482e168
prefix internal structures with _krb5_
2011-03-12 13:50:39 -08:00
03806492d9
prefix symbols that are _krb5_ structures
2011-03-12 13:45:09 -08:00
e189d712ce
Don't dereference NULL in error verify_checksum error path
...
Andrew Bartlett
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-11-28 09:46:43 -08:00
0f853405fe
Add missing export and calling convention annotations
2010-11-24 15:32:49 -05:00
2f2dca748d
Don't dereference a possible NULL pointer
2010-11-24 15:32:35 -05:00
5a801c8f4a
use krb5_data_ct_cmp
2010-11-06 20:52:53 +01:00
1d9072f026
krb5: reorganise crypto.c
...
lib/krb5/crypto.c was a large, monolithic block of code which made
it very difficult to selectively enable and disable particular
alogrithms.
Reorganise crypto.c into individual files for each encryption and
salt time, and place the structures which tie everything together
into their own file (crypto-algs.c)
Add a non-installed library (librfc3961) and test program
(test_rfc3961) which builds a minimal rfc3961 crypto library, and
checks that it is usable.
2010-11-03 11:12:24 +00:00
0a608964a4
only set error code in case of failure, add comment
2010-10-02 12:13:19 -07:00
0789271ebb
indent, return error code
2010-10-02 11:59:53 -07:00
7ea9ccf737
heimdal: added verbose logging of hemimdal crypto errors
...
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-10-02 11:56:26 -07:00
856c1c0a86
accept >= 0 and valid return codes from RAND_bytes due to broken engine from the isc bind implementation, reported by Sam Liddicott
2010-09-01 21:00:07 -07:00
3a8922fe2d
Change return type of checksum_type::checksum
...
struct checksum_type::checksum had a return value of krb5_enctype,
even though implementations returned krb5_error_code. Change
declaration to match implementation.
2010-08-20 13:03:39 -04:00
4660ec8358
check for underruns
2010-03-21 21:05:21 -07:00
69ea9b38e9
heimdal - fix overlapped identifiers in the "krb5" library
...
heimdal - fix overlapped identifiers in the "krb5" library
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-03-16 10:05:35 -07:00
8a57d5cb08
Add krb5_allow_weak_crypto API to enable weak enctypes
...
Add krb5_allow_weak_crypto parallel to the API introduced in MIT
Kerberos 1.8. Enables or disables all enctypes marked as weak.
Add a new enctype flag marking weak enctypes (all of the ones that
are disabled by default).
Signed-off-by: Love Hornquist Astrand <lha@h5l.org >
2010-01-27 21:50:58 -08:00
687db64c56
Patch from Secure Endpoints/Asanka Herath for windows support
2009-12-21 08:45:28 +01:00
1f0da1963a
deprecated warning
2009-11-22 16:09:46 -08:00
316fc6ff8f
Simplify subkey usage for tgs-req, don't rewrite tgs-rep-sub-key keyuage for arcfour, its correct
2009-11-15 21:31:25 -08:00
a7d5b2a15e
make zero_ivec unsigned
2009-09-20 22:37:27 -07:00
1b07597123
drop EVP_cts support
2009-08-25 20:29:23 -07:00
6ead770ad1
Implement CTS in terms of CBC
2009-08-25 20:26:01 -07:00
8286ff8ec4
document more
2009-08-18 18:58:53 +02:00
65f40a25c3
Always include md5, its needed for HMAC-MD5 that arcfour enctypes uses
2009-08-18 15:57:37 +02:00
4afb61a24a
allow compiling out weak enctype support
2009-08-18 13:54:35 +02:00
88d55a1d06
Make compile for weak crypto global (HEIM_WEAK_CRYPTO) and use it for GSSAPI too
2009-08-17 18:06:42 +02:00
a6bfd9bb41
use constant time memcmp
2009-08-17 12:01:06 +02:00
f01ca1a10e
doxygen
2009-08-14 13:46:45 +02:00
550a6c9427
doxygen fixes, include <evp-hcrypto.h> if not using openssl
2009-08-14 11:45:18 +02:00
33fcc11b3f
Replace last SHA1_ with EVP_ replacement
2009-08-11 10:00:30 +02:00
18a4b69b48
Switch more cases to EVP crypto layer
2009-08-10 17:51:17 +02:00
9b710bed81
store is never read again
2009-07-29 22:37:58 +02:00
c99b2003e2
Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25286 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-22 17:56:41 +00:00
65e7108f79
use oid variable
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25235 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-28 01:17:52 +00:00
942a821fab
remove RCSID
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25171 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-04 06:17:40 +00:00
628c662250
doxygen
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25150 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-27 02:42:42 +00:00
5e30553aca
Add krb5_crypto_fx_cf2().
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25147 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-27 02:19:41 +00:00
ccaaea0378
fix comment
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25100 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-06 02:51:05 +00:00
4b73e8078f
use SHA_DIGEST_LENGTH
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24979 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 09:01:13 +00:00
f0616af047
Use blocksize instead of 16.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24946 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-25 15:37:53 +00:00
8082c12c88
q not used, don't increment
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24830 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:26:22 +00:00
9d4f21d07b
only copy out padding if we had a padding buffer
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24827 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:25:52 +00:00
Love Hornquist Astrand