Files
heimdal/lib/krb5
Luke Howard 85756bd228 krb5: make keyed checksums mandatory where possible
Make keyed checksums mandatory when generating and verifying checksums, with
the following exceptions:

* the checksum is being generated or verified as part of encrypting data for
  a legacy (DES) encryption type

* the KRB5_CRYPTO_FLAG_ALLOW_UNKEYED_CHECKSUM flag was set on the crypto
  context, used to allow unkeyed checksums in krb5 authenticators

By making unkeyed checksums opt-in, we eliminate a class of potential
vulnerabilities where callers could pass unkeyed checksums.

Any code that uses the mandatory checksum type for a given non-legacy
encryption type should not be affected by this change. It could potentially
break, say, a client trying to do FAST with DES keys but, that should not be
supported (because FAST KDCs also support AES).

Closes: #835
2021-09-21 18:02:25 +10:00
..
2011-05-21 11:57:31 -07:00
2021-09-19 13:25:27 +10:00
2018-09-10 14:42:18 -04:00
2017-04-29 01:05:59 -04:00
2019-07-09 12:34:26 -05:00
2016-04-16 16:58:08 -05:00
2018-10-08 08:46:37 -04:00
2012-01-10 22:54:50 +01:00
2021-03-26 18:47:49 -05:00
2011-07-24 16:02:22 -07:00
2014-04-25 02:42:17 +02:00
2011-05-21 11:57:31 -07:00
2014-04-25 02:42:17 +02:00
2011-05-21 11:57:31 -07:00
2011-05-21 11:57:31 -07:00
2011-05-21 11:57:31 -07:00
2021-09-19 13:25:27 +10:00
2021-09-13 19:20:11 +10:00
2007-07-15 20:49:46 +00:00
2009-05-04 06:17:40 +00:00
2021-09-13 19:20:11 +10:00
2021-03-31 22:59:38 -05:00
2021-09-19 13:25:27 +10:00
2014-03-24 23:07:49 -05:00
2011-05-21 11:57:31 -07:00
2021-09-19 13:25:27 +10:00
2021-09-20 11:29:11 +10:00
2016-11-20 17:43:51 -06:00
2016-11-28 17:34:44 -06:00
2017-04-29 13:55:24 -04:00
2017-04-29 01:05:59 -04:00
2016-12-14 22:05:46 -06:00
2020-04-15 09:00:20 +10:00
2016-02-26 00:55:30 -06:00
2012-05-28 13:14:55 +01:00
2011-05-21 11:57:31 -07:00
2019-01-02 13:56:04 -05:00
2010-09-18 14:45:33 -07:00
2011-05-21 11:57:31 -07:00
2009-05-04 06:17:40 +00:00
2014-04-29 11:04:21 -06:00
2009-05-04 06:17:40 +00:00
2011-05-21 11:57:31 -07:00
2009-05-04 06:17:40 +00:00
2011-05-21 11:57:31 -07:00
2009-05-04 06:17:40 +00:00
2021-09-19 14:01:51 +10:00
2009-05-04 06:17:40 +00:00
2019-01-03 20:06:27 -06:00
2009-05-04 06:17:40 +00:00
2010-05-30 13:37:07 -07:00
2009-05-04 06:17:40 +00:00
2011-05-21 11:57:31 -07:00
2021-08-09 21:46:24 +10:00