Commit Graph

268 Commits

Author SHA1 Message Date
Asanka C. Herath 0f853405fe Add missing export and calling convention annotations 2010-11-24 15:32:49 -05:00
Asanka C. Herath 2f2dca748d Don't dereference a possible NULL pointer 2010-11-24 15:32:35 -05:00
Love Hornquist Astrand 5a801c8f4a use krb5_data_ct_cmp 2010-11-06 20:52:53 +01:00
Simon Wilkinson 1d9072f026 krb5: reorganise crypto.c
lib/krb5/crypto.c was a large, monolithic block of code which made
it very difficult to selectively enable and disable particular
alogrithms.

Reorganise crypto.c into individual files for each encryption and
salt time, and place the structures which tie everything together
into their own file (crypto-algs.c)

Add a non-installed library (librfc3961) and test program
(test_rfc3961) which builds a minimal rfc3961 crypto library, and
checks that it is usable.
2010-11-03 11:12:24 +00:00
Love Hornquist Astrand 0a608964a4 only set error code in case of failure, add comment 2010-10-02 12:13:19 -07:00
Love Hornquist Astrand 0789271ebb indent, return error code 2010-10-02 11:59:53 -07:00
Andrew Bartlett 7ea9ccf737 heimdal: added verbose logging of hemimdal crypto errors
Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-10-02 11:56:26 -07:00
Love Hornquist Astrand 856c1c0a86 accept >= 0 and valid return codes from RAND_bytes due to broken engine from the isc bind implementation, reported by Sam Liddicott 2010-09-01 21:00:07 -07:00
Asanka Herath 3a8922fe2d Change return type of checksum_type::checksum
struct checksum_type::checksum had a return value of krb5_enctype,
even though implementations returned krb5_error_code.  Change
declaration to match implementation.
2010-08-20 13:03:39 -04:00
Love Hornquist Astrand 4660ec8358 check for underruns 2010-03-21 21:05:21 -07:00
Matthias Dieter Wallnöfer 69ea9b38e9 heimdal - fix overlapped identifiers in the "krb5" library
heimdal - fix overlapped identifiers in the "krb5" library

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-03-16 10:05:35 -07:00
Russ Allbery 8a57d5cb08 Add krb5_allow_weak_crypto API to enable weak enctypes
Add krb5_allow_weak_crypto parallel to the API introduced in MIT
Kerberos 1.8.  Enables or disables all enctypes marked as weak.
Add a new enctype flag marking weak enctypes (all of the ones that
are disabled by default).

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
2010-01-27 21:50:58 -08:00
Love Hornquist Astrand 687db64c56 Patch from Secure Endpoints/Asanka Herath for windows support 2009-12-21 08:45:28 +01:00
Love Hornquist Astrand 1f0da1963a deprecated warning 2009-11-22 16:09:46 -08:00
Love Hornquist Astrand 316fc6ff8f Simplify subkey usage for tgs-req, don't rewrite tgs-rep-sub-key keyuage for arcfour, its correct 2009-11-15 21:31:25 -08:00
Love Hornquist Astrand a7d5b2a15e make zero_ivec unsigned 2009-09-20 22:37:27 -07:00
Love Hornquist Astrand 1b07597123 drop EVP_cts support 2009-08-25 20:29:23 -07:00
Love Hornquist Astrand 6ead770ad1 Implement CTS in terms of CBC 2009-08-25 20:26:01 -07:00
Love Hornquist Astrand 8286ff8ec4 document more 2009-08-18 18:58:53 +02:00
Love Hornquist Astrand 65f40a25c3 Always include md5, its needed for HMAC-MD5 that arcfour enctypes uses 2009-08-18 15:57:37 +02:00
Love Hornquist Astrand 4afb61a24a allow compiling out weak enctype support 2009-08-18 13:54:35 +02:00
Love Hornquist Astrand 88d55a1d06 Make compile for weak crypto global (HEIM_WEAK_CRYPTO) and use it for GSSAPI too 2009-08-17 18:06:42 +02:00
Love Hornquist Astrand a6bfd9bb41 use constant time memcmp 2009-08-17 12:01:06 +02:00
Love Hornquist Astrand f01ca1a10e doxygen 2009-08-14 13:46:45 +02:00
Love Hornquist Astrand 550a6c9427 doxygen fixes, include <evp-hcrypto.h> if not using openssl 2009-08-14 11:45:18 +02:00
Love Hornquist Astrand 33fcc11b3f Replace last SHA1_ with EVP_ replacement 2009-08-11 10:00:30 +02:00
Love Hornquist Astrand 18a4b69b48 Switch more cases to EVP crypto layer 2009-08-10 17:51:17 +02:00
Love Hornquist Astrand 9b710bed81 store is never read again 2009-07-29 22:37:58 +02:00
Love Hörnquist Åstrand c99b2003e2 Implement gss_wrap_iov, gss_unwrap_iov for CFX type encryption types.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25286 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-06-22 17:56:41 +00:00
Love Hörnquist Åstrand 65e7108f79 use oid variable
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25235 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-28 01:17:52 +00:00
Love Hörnquist Åstrand 942a821fab remove RCSID
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25171 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-04 06:17:40 +00:00
Love Hörnquist Åstrand 628c662250 doxygen
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25150 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-27 02:42:42 +00:00
Love Hörnquist Åstrand 5e30553aca Add krb5_crypto_fx_cf2().
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25147 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-27 02:19:41 +00:00
Love Hörnquist Åstrand ccaaea0378 fix comment
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25100 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-04-06 02:51:05 +00:00
Love Hörnquist Åstrand 4b73e8078f use SHA_DIGEST_LENGTH
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24979 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-29 09:01:13 +00:00
Love Hörnquist Åstrand f0616af047 Use blocksize instead of 16.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24946 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-25 15:37:53 +00:00
Love Hörnquist Åstrand 8082c12c88 q not used, don't increment
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24830 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:26:22 +00:00
Love Hörnquist Åstrand 9d4f21d07b only copy out padding if we had a padding buffer
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24827 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-27 03:25:52 +00:00
Love Hörnquist Åstrand 7f0f3de8ee doxygen
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24754 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:43 +00:00
Love Hörnquist Åstrand e8eb837b41 doxygen
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24753 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:32 +00:00
Love Hörnquist Åstrand 4ed2490144 Verify checksum.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24752 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:21 +00:00
Love Hörnquist Åstrand 8acbbf8edf simplify now that there is only one data buffer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24751 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:13:08 +00:00
Love Hörnquist Åstrand dcb75ee170 Only one DATA buffer for _iov functions.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24750 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-16 19:12:55 +00:00
Love Hörnquist Åstrand 7614f9aca1 move out some deprecated functions
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24305 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:52:37 +00:00
Love Hörnquist Åstrand a6fcb85344 doxygen fixup
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24273 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:47:24 +00:00
Love Hörnquist Åstrand c25af51232 make paranoia check less paranoid
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24245 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:42:52 +00:00
Love Hörnquist Åstrand c6e9b9cabc simplify
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24207 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-18 04:59:34 +00:00
Love Hörnquist Åstrand 28de60a9bc stricter check that enctype matches checksum type when using keyed checksum
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24205 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-15 04:32:59 +00:00
Love Hörnquist Åstrand 242139b224 plug memory leak
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24157 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:09:28 +00:00
Love Hörnquist Åstrand 554655b628 call cleanup callback on free schedule in setup
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24155 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-12-11 05:09:08 +00:00