diff options
| author | Greg Hudson <ghudson@mit.edu> | 2011-09-23 14:35:34 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2011-09-23 14:35:34 +0000 |
| commit | b03f83736fd68369070f2a7600aff8e4e3eed74f (patch) | |
| tree | 8bfecb95b736b5a9b916912ab2f3a63641cfd679 /src/include | |
| parent | 260161b4fe2a05b9afa95446eee9096f6c75ceaf (diff) | |
| download | krb5-b03f83736fd68369070f2a7600aff8e4e3eed74f.tar.gz krb5-b03f83736fd68369070f2a7600aff8e4e3eed74f.tar.xz krb5-b03f83736fd68369070f2a7600aff8e4e3eed74f.zip | |
Recast encrypted challenge as linked built-ins
Since it has no external dependencies, split up encrypted preauth into
clpreauth and kdcpreauth chunks and link them directly into the
consumers.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25227 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/fast_factor.h | 86 |
1 files changed, 86 insertions, 0 deletions
diff --git a/src/include/fast_factor.h b/src/include/fast_factor.h new file mode 100644 index 0000000000..42f1b27a7f --- /dev/null +++ b/src/include/fast_factor.h @@ -0,0 +1,86 @@ +/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */ +/* include/fast_factor.h - Convenience inline functions for FAST factors */ +/* + * Copyright (C) 2011 by the Massachusetts Institute of Technology. + * All rights reserved. + * + * Export of this software from the United States of America may + * require a specific license from the United States Government. + * It is the responsibility of any person or organization contemplating + * export to obtain such a license before exporting. + * + * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and + * distribute this software and its documentation for any purpose and + * without fee is hereby granted, provided that the above copyright + * notice appear in all copies and that both that copyright notice and + * this permission notice appear in supporting documentation, and that + * the name of M.I.T. not be used in advertising or publicity pertaining + * to distribution of the software without specific, written prior + * permission. Furthermore if you modify this software you must label + * your software as modified software and not distribute it in such a + * fashion that it might be confused with the original M.I.T. software. + * M.I.T. makes no representations about the suitability of + * this software for any purpose. It is provided "as is" without express + * or implied warranty. + */ + +#ifndef FAST_FACTOR_H + +/* + * Returns success with a null armor_key if FAST is available but not in use. + * Returns failure if the client library does not support FAST. + */ +static inline krb5_error_code +fast_get_armor_key(krb5_context context, krb5_clpreauth_get_data_fn get_data, + krb5_clpreauth_rock rock, krb5_keyblock **armor_key) +{ + krb5_error_code retval = 0; + krb5_data *data; + retval = get_data(context, rock, krb5_clpreauth_fast_armor, &data); + if (retval == 0) { + *armor_key = (krb5_keyblock *) data->data; + data->data = NULL; + get_data(context, rock, krb5_clpreauth_free_fast_armor, &data); + } + return retval; +} + +static inline krb5_error_code +fast_kdc_get_armor_key(krb5_context context, + krb5_kdcpreauth_get_data_fn get_entry, + krb5_kdc_req *request, + struct _krb5_db_entry_new *client, + krb5_keyblock **armor_key) +{ + krb5_error_code retval; + krb5_data *data; + retval = get_entry(context, request, client, krb5_kdcpreauth_fast_armor, + &data); + if (retval == 0) { + *armor_key = (krb5_keyblock *) data->data; + data->data = NULL; + get_entry(context, request, client, + krb5_kdcpreauth_free_fast_armor, &data); + } + return retval; +} + + + +static inline krb5_error_code +fast_kdc_replace_reply_key(krb5_context context, + krb5_kdcpreauth_get_data_fn get_data, + krb5_kdc_req *request) +{ + return 0; +} + +static inline krb5_error_code +fast_set_kdc_verified(krb5_context context, + krb5_clpreauth_get_data_fn get_data, + krb5_clpreauth_rock rock) +{ + return 0; +} + +#endif /* FAST_FACTOR_H */ |
