oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
12,065 Commits 2 Branches 2 Tags
294cccfdf37f96c64d47f0080636fecefe6d664b
Commit Graph

76 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
edd4885b10 clean up AES code to use a structure instead of a key array 
(_krb5_AES_string_to_default_iterator): set to 4096 as described in
aes draft -04
(derive_key): always remove the key->schedule since its
will contain the wrong (parent key) info


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12382 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-06-21 05:41:55 +00:00
Love Hörnquist Åstrand
4644344231 add _krb5_AES_string_to_default_iterator 
add krb5_string_to_key_salt_opaque()
fix keylengh for keytype_aes256


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12373 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-06-17 04:20:18 +00:00
Love Hörnquist Åstrand
8b3ba5532c protect the random initiator with a mutex 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12305 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-05-16 20:44:55 +00:00
Love Hörnquist Åstrand
c81674f22e unexport krb5_PKCS5_PBKDF2 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12153 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-04-26 11:40:56 +00:00
Love Hörnquist Åstrand
399e0ab56d (krb5_DES_AFS3_CMU_string_to_key): used p1 instead of the "illegal" 
salt #~, same change as kth-krb did 1999. Problems occur with crypt()
that behaves like AT&T crypt (openssl does this). Pointed out by
Marcus Watts.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11952 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-04-01 16:51:54 +00:00
Love Hörnquist Åstrand
221041ca22 (usage2arcfour): map KRB5_KU_TICKET to 2, rom Harald Joerg <harald.joerg@fujitsu-siemens.com>. (enctype_arcfour_hmac_md5): disable checksum_hmac_md5_enc 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11934 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-03-28 10:33:54 +00:00
Love Hörnquist Åstrand
a629c76a6c (krb5_enctype_keysize): return key size of encyption type, inspired by 
Aidan Cully <aidan@kublai.com>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11930 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-03-28 01:00:06 +00:00
Love Hörnquist Åstrand
ea94038288 (_krb5_aes_cts_encrypt): make key argument a 'const void *' to avoid 
AES_KEY being exposed in krb5-private.h


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11610 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-01-23 19:05:52 +00:00
Love Hörnquist Åstrand
7a2c854c80 Add support for AES (draft-raeburn-krb-rijndael-krb-02), not enabled 
by default.
(HMAC_SHA1_DES3_checksum): rename to SP_HMAC_SHA1_checksum and modify
to support checksumtype that are have a shorter wireformat then their
output block size.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11583 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-01-15 04:24:05 +00:00
Love Hörnquist Åstrand
1f6debd562 (struct encryption_type): split the blocksize into blocksize and 
padsize, padsize is the minimum padding size. they are the same for now
(enctype_*): add padsize
(encrypt_internal): use padsize
(encrypt_internal_derived): use padsize
(wrapped_length): use padsize
(wrapped_length_dervied): use padsize


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11582 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-01-15 03:54:51 +00:00
Love Hörnquist Åstrand
e96bdba80d add extra `opaque' argument to string_to_key function for each enctype 
in preparation enctypes that uses `Encryption and Checksum
Specifications for Kerberos 5' draft


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11581 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2003-01-15 03:26:46 +00:00
Johan Danielsson
ae784bda45 add function krb5_crypto_getblocksize that extracts the required 
blocksize from a crypto context


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11347 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2002-09-03 19:58:15 +00:00
Johan Danielsson
2ccdee74a3 get rid of DES3_CBC_encrypt_ivec, just use zero ivec in 
DES3_CBC_encrypt if passed ivec is NULL


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11341 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2002-09-03 17:31:12 +00:00
Johan Danielsson
7ec3e75760 (usage2arcfour): don't abort if the usage is unknown 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10953 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2002-04-29 16:31:54 +00:00
Johan Danielsson
f9059789e8 constify some 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10911 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2002-04-18 09:03:27 +00:00
Johan Danielsson
a0428d8b6c (krb5_crypto_init): check that the key size matches the expected length 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10902 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2002-04-16 15:58:13 +00:00
Assar Westerlund
ccfd657692 rename functions DES_* to krb5_* to avoid colliding with modern 
openssl


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10867 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2002-03-10 23:10:12 +00:00
Assar Westerlund
4f21111c96 (create_checksum): make usage `unsigned' (it's not really a 
krb5_key_usage).  From Ben Harris <bjh21@netbsd.org>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10806 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2002-01-06 23:12:51 +00:00
Assar Westerlund
9f1c66fe5f use krb5_enctype consistently. From Ben Harris <bjh21@netbsd.org> 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10804 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2002-01-06 23:10:06 +00:00
Johan Danielsson
d71eccdf57 use our own des string-to-key function, since the one from openssl 
sometimes generates wrong output


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10802 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-12-20 22:28:45 +00:00
Assar Westerlund
6ec3f169e0 remove old comment 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10769 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-10-22 12:45:43 +00:00
Assar Westerlund
2d5ce19c5f make all high-level encrypting and decrypting functions check the 
return value of the underlying function and handle errors more
consistently.  noted by Sam Hartman <hartmans@mit.edu>


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10767 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-10-22 01:20:34 +00:00
Assar Westerlund
d9aedd0fd1 (enctype_arcfour_hmac_md5): actually use a non-keyed checksum when it 
should be non-keyed


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10763 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-10-20 22:02:30 +00:00
Assar Westerlund
5c99ba3d29 use des functions to avoid generating warnings with openssl's 
prototypes


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10700 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-09-16 04:48:05 +00:00
Assar Westerlund
aad564d1c2 re-write the handling of crypto libraries. try to use the one of 
openssl's libcrypto or krb4's libdes that has all the required
functionality (md4, md5, sha1, des, rc4).  if there is no such
library, the included lib/des is built.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10519 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-08-22 20:30:33 +00:00
Assar Westerlund
05b44561ca remove an unused variable and add a const 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10175 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-06-23 22:33:10 +00:00
Johan Danielsson
dbe9dbe36e (krb5_string_to_key_derived): leak less memory 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10118 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-06-18 16:55:41 +00:00
Assar Westerlund
d27aa3b62e add some krb5_{set,clear}_error_string 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9937 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-05-14 06:14:52 +00:00
Assar Westerlund
780b387de7 (encryption_type): make field names more consistent 
(create_checksum): separate usage and type
(krb5_create_checksum): add a separate type parameter
(encrypt_internal): only free once on mismatched checksum length


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9868 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-05-09 07:06:47 +00:00
Johan Danielsson
3937ac0261 make checksum_types into an array of pointers 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9829 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-05-02 08:58:14 +00:00
Assar Westerlund
b201faa9a6 (create_checksum): change so that `type == 0' means pick from the 
`crypto' (context) and otherwise use that type.  this is not a large
change in practice and allows callers to specify the exact checksum
algorithm to use


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9760 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-03-26 00:49:12 +00:00
Assar Westerlund
42a66c6903 (krb5_derive_key): new function, used by derived-key-test.c 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9744 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-03-12 07:44:05 +00:00
Assar Westerlund
3ec01acc28 add blank lines to make make-proto happier 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9708 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-02-20 01:51:48 +00:00
Assar Westerlund
2aefcf796c try to use handle using openssl instead of libdes better. based on patches from GOMBAS Gabor <gombasg@inf.elte.hu> and Brian May <bam@snoopy.apana.org.au> 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9681 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-02-15 04:20:54 +00:00
Assar Westerlund
5761d220bb (decrypt_internal_derived): check that there's enough data 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9622 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-01-30 17:10:55 +00:00
Assar Westerlund
59a594bad4 use the openssl api for md4/md5/sha. handle openssl/*.h 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9559 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2001-01-29 02:09:01 +00:00
Assar Westerlund
633782864b (main): handle krb5_init_context failure consistently 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9443 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-12-31 08:05:03 +00:00
Assar Westerlund
978cb24ac3 (DES_AFS3_CMU_string_to_key): always treat cell names as lower case 
(krb5_encrypt_ivec, krb5_decrypt_ivec): new functions that allow an
explicit ivec to be specified.  fix all sub-functions.
(DES3_CBC_encrypt_ivec): new function that takes an explicit ivec


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9310 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-12-08 05:01:31 +00:00
Assar Westerlund
be8dcb7ae5 (_key_schedule): re-use an existing schedule 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9027 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-09-09 16:49:06 +00:00
Assar Westerlund
cedc89c0f3 remove trailing commas 
(KRB5_KU_USAGE_SEQ): renamed from KRB5_KU_USAGE_MIC


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8998 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-08-27 03:32:31 +00:00
Assar Westerlund
dcac4bde92 (encrypt_internal_derived): free the checksum after use 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8946 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-08-16 07:39:10 +00:00
Assar Westerlund
97817f4b13 extra braces 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8849 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-07-27 05:30:22 +00:00
Johan Danielsson
6d5c7680fd typo in previous 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8621 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-07-08 16:30:37 +00:00
Johan Danielsson
14799a4363 fix type in des3-cbc-none 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8614 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-07-08 16:04:25 +00:00
Assar Westerlund
6c81500e59 introduce the `special' encryption methods that are not like all other 
encryption methods and implement arcfour-hmac-md5


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8560 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-07-06 00:06:58 +00:00
Johan Danielsson
cec6004120 add some more pseudo crypto types 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8544 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-07-05 13:06:08 +00:00
Assar Westerlund
211c70f9ba (krb5_get_wrapped_length): rewrite into different parts for the 
derived and non-derived cases


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8170 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-04-11 17:30:22 +00:00
Assar Westerlund
7046d9605a (krb5_get_wrapped_length): the padding should be done after having 
added confounder and checksum


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@8168 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-04-11 02:12:29 +00:00
Assar Westerlund
94e1d9abee update to pseudo-standard APIs for md4,md5,sha. 
some changes to libdes calls to make them more portable.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7817 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-01-25 23:06:55 +00:00
Assar Westerlund
b2cf20bac2 (ARCFOUR_string_to_key): correct signature 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7739 ec53bebd-3082-4978-b11e-865c3cabbd6b
 2000-01-06 20:21:13 +00:00