Remove ChangeLog files from the source tree. From now on, the

subversion commit log entry needs to include information that would
have been in the changelog.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17893 dc483132-0cff-0310-8789-dd5450dbe970

15 files changed, 0 insertions, 4015 deletions

diff --git a/src/lib/crypto/ChangeLog b/src/lib/crypto/ChangeLog
deleted file mode 100644
index 7c837afb17..0000000000
--- a/src/lib/crypto/ChangeLog
+++ /dev/null
@@ -1,1121 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2006-01-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (t_nfold$(EXEEXT)): Include support library.
-
-2006-01-11  Sam Hartman  <hartmans@mit.edu>
-
-	* keyblocks.c (krb5int_c_free_keyblock): Remove krb5_callconv modifier
-
-2005-11-28  Tom Yu  <tlyu@mit.edu>
-
-	* t_cts.c, vectors.c: Don't include krb5.h.
-
-2005-11-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* t_hmac.c, t_pkcs5.c: Don't include krb5.h.
-
-2005-08-20  Ken Raeburn  <raeburn@mit.edu>
-
-	* configure.in: Use K5_AC_INIT instead of AC_INIT.
-
-2005-05-24  Ken Raeburn  <raeburn@mit.edu>
-
-	* keyblocks.c (krb5int_c_free_keyblock): Call
-	krb5int_c_free_keyblock_contents instead of
-	krb5_free_keyblock_contents.
-
-2005-05-19  Sam Hartman  <hartmans@mit.edu>
-
-	* keyblocks.c :  File to contain memory management for keyblocks
-	moved from libkrb5  
-
-	* Makefile.in (SRCS):  keyblocks.c is new
-
-	* etypes.c: Add PRF for AES
-
-	* Makefile.in (t_prf$(EXEEXT)): New output for prf test framework
-
-2005-05-18  Sam Hartman  <hartmans@mit.edu>
-
-	* Makefile.in :  Add prf.c
-
-	* prf.c t_prf.c: New file
-
-	* etypes.c: Adjust structures to support the PRF declarations.
-
-2005-03-15  Jeffrey Altman <jaltman@mit.edu>
-
-        * keyed_cksum.c: (krb5_c_is_keyed_cksum): this is a boolean 
-          function.  It should not return -1U on error.  Instead return
-          0 (false) so that the caller doesn't think it succeeded.
-
-          The only two callers are rd_safe and mk_safe.  Neither checks
-          for special cases.
-
-2005-01-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* prng.c (krb5int_prng_init): Incorporate do_yarrow_init body.
-	Don't check inited variable.
-	(inited): Variable deleted.
-	(krb5_c_random_make_octets, krb5int_prng_cleanup): Don't check
-	it.
-	(do_yarrow_init): Deleted.
-
-2005-01-12  Tom Yu  <tlyu@mit.edu>
-
-	* prng.c (read_entropy_from_device): Use ssize_t, not size_t, so
-	read() returning -1 doesn't cause trouble.
-
-2004-11-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* prng.c (do_yarrow_init): Move mutex initialization here.
-	(krb5int_prng_init): Don't do it here.
-
-2004-11-15  Sam Hartman  <hartmans@mit.edu>
-
-	* t_prng.expected t_prng.reseedtest-expected :  Update expected
-	PRNG test output and confirm that reseeds and gates happen correctly.
-
-2004-10-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* prng.c (yarrow_lock): Rename to krb5int_yarrow_lock via macro,
-	and change to be non-static.
-	(krb5int_prng_init): Call do_yarrow_init here.
-	(krb5_c_random_add_entropy): Don't call it here.  Don't lock the
-	mutex, either.
-	(krb5_c_random_make_octets): Don't lock the mutex.
-
-2004-06-16  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (MAC_SUBDIRS): Don't set.
-
-2004-06-15  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (SHLIB_DIRS, SHLIB_EXPLIBS, SHLIB_EXPDEPLIBS): Set
-	to depend on the new support library.
-	(SHLIB_LIBS): Don't define.
-	(SHLIB_RDIRS): Set.
-
-	* configure.in: Use BUILD_LIBRARY_WITH_DEPS instead of the no-deps
-	version.
-
-2004-06-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBBASE): Renamed from LIB.
-
-2004-06-02  Ken Raeburn  <raeburn@mit.edu>
-
-	* prng.c (init_once): Variable deleted.
-	(krb5_c_random_add_entropy): Do the initialization once, using
-	the yarrow_lock mutex instead of k5_once to protect it.
-
-2004-05-24  Ezra Peisach  <epeisach@mit.edu>
-
-	* t_nfold.c (fold_kerberos): Change nbytes argument to unsigned.
-
-	* t_encrypt.c (compare_results): Declare static.
-	(main): Free allocated memory before exit.
-
-2004-05-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (t_encrypt, t_prng, t_hmac, t_pkcs5, vectors,
-	t_cts): Link test programs against thread support library.
-
-2004-05-12  Ken Raeburn  <raeburn@mit.edu>
-
-	* libk5crypto.exports: Add the DES tables back in; libdes425 uses
-	them directly.
-
-2004-05-07  Ken Raeburn  <raeburn@mit.edu>
-
-	* configure.in: Check for endian.h and machine/endian.h.
-
-2004-04-30  Ken Raeburn  <raeburn@mit.edu>
-
-	* crypto_libinit.c (initialized): Variable deleted.
-	(cryptoint_initialize_library, cryptoint_cleanup_library): Use new
-	macros for automatic shared library init/fini functions.
-	(prng_cleanup): Declaration deleted.
-	(krb5int_prng_init, krb5int_prng_cleanup): Declare.
-	(cryptoint_initialize_library): Call krb5int_prng_init.
-	(krb5int_crypto_init): New function, checks that
-	cryptoint_initialize_library was called successfully.
-	(cryptoint_cleanup_library): Call krb5int_prng_cleanup only if the
-	initializer ran.
-	* crypto_libinit.h: Deleted.
-	* prng.c: Include k5-thread.h.
-	(init_once, init_error, yarrow_lock): New variables.
-	(krb5int_prng_init): New function; finish initializing the mutex
-	lock.
-	(do_yarrow_init): New function.
-	(krb5_c_random_add_entropy): Call it once only.  Lock the mutex
-	before processing the input.
-	(krb5_c_random_make_octets): Lock the mutex before extracting
-	random bytes.
-	(krb5int_prng_cleanup): Destroy the mutex.
-
-	* Makefile.in (LIBINITFUNC, LIBFINIFUNC): New variables.
-
-	* libk5crypto.exports: Drop the library init/fini functions and
-	the DES tables from the export list.
-
-2004-04-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* libk5crypto.exports: New file.
-
-2004-03-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* pbkdf2.c (hmac1): Make a local copy of the supplied keyblock
-	structure, in case we want to modify it.
-
-2004-03-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* prng.c (krb5int_prng_cleanup): Renamed from prng_cleanup.
-	* crypto_libinit.c: Include k5-int.h.
-	(cryptoint_cleanup_library): Updated call.
-
-2004-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* configure.in: Don't check for --enable-athena and don't define
-	ATHENA_DES3_KLUDGE.
-
-2004-02-24  Sam Hartman  <hartmans@avalanche-breakdown.mit.edu>
-
-	* etypes.c: Remove ENCTYPE_LOCAL_DES3_HMAC_SHA1
-
-2004-02-18  Ken Raeburn  <raeburn@mit.edu>
-
-	* block_size.c, checksum_length.c, cksumtype_to_string.c,
-	coll_proof_cksum.c, decrypt.c, encrypt.c, encrypt_length.c,
-	enctype_compare.c, enctype_to_string.c, hmac.c,
-	keyed_checksum_types.c, keyed_cksum.c, make_checksum.c,
-	make_random_key.c, nfold.c, old_api_glue.c, prng.c,
-	string_to_cksumtype.c, string_to_enctype.c, string_to_key.c,
-	valid_cksumtype.c, valid_enctype.c, verify_checksum.c: Use ANSI C
-	style function definitions.
-
-2004-02-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* t_encrypt.c (compare_results): New function.
-	(main): Use it to check decryption results against the original
-	plaintext.  When testing with cipher state, encrypt and then
-	decrypt (and verify) two messages.
-	* Makefile.in (t_encrypt$(EXEEXT)): Depend on CRYPTO_DEPLIB.
-
-2004-02-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* t_cts.c (test_cts): Process encryption and decryption IVs
-	separately, make sure they match, and display the value.
-
-2003-12-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* etypes.c (krb5_enctypes_list): Fill in required_ctype field.
-	* mandatory_sumtype.c: New file.
-	* Makefile.in (SRCS, OBJS, STLIBOBJS): Build it.
-
-2003-07-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* block_size.c (krb5_c_block_size): Read new numeric fields for
-	key/block/hash sizes instead of calling functions.
-	* checksum_length.c (krb5_c_checksum_length): Likewise.
-	* combine_keys.c (krb5int_c_combine_keys, dr): Likewise.
-	* hmac.c (krb5_hmac): Likewise.
-	* make_checksum.c (krb5_c_make_checksum): Likewise.
-	* make_random_key.c (krb5_c_make_random_key): Likewise.
-	* pbkdf2.c (hmac1): Likewise.
-	* string_to_key.c (krb5_c_string_to_key_with_params): Likewise.
-	* t_hmac.c (hmac1): Likewise.
-
-2003-07-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* pbkdf2.c (foo): Never call com_err.
-
-2003-06-25  Ken Raeburn  <raeburn@mit.edu>
-
-	* checksum_length.c (krb5_c_checksum_length): Handle trunc_size.
-
-2003-06-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* cksumtypes.c (krb5_cksumtypes_list): Add aes128/256 hmacs, with
-	new trunc_size field.
-
-	* make_checksum.c (krb5_c_make_checksum): If trunc_size is
-	specified, shrink the computed checksum down to the indicated
-	size.
-
-2003-06-05  Sam Hartman  <hartmans@mit.edu>
-
-	* string_to_key.c (krb5_c_string_to_key_with_params): Only allow
-	AFS s2k  for DES enctypes
-
-2003-05-15  Sam Hartman  <hartmans@mit.edu>
-
-	* combine_keys.c (enctype_ok): new function to determine if we support combine_keys for a particular enctype
-
-2003-05-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* etypes.c (krb5_enctypes_list): Add names aes128-cts and
-	aes256-cts as aliases.
-
-2003-05-13  Sam Hartman  <hartmans@mit.edu>
-
-	* t_encrypt.c: Add aes enctypes
-
-2003-05-08  Sam Hartman  <hartmans@mit.edu>
-
-	* string_to_key.c: Move krb5_c_string_to_key_with_params to krb5.h
-
-2003-04-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* pbkdf2.c (krb5int_pbkdf2): Provide a temporary buffer for the
-	output from F, if the remaining space in the output buffer isn't
-	big enough.  Free the temporary buffers before returning.
-
-	* etypes.c (krb5_enctypes_list): Use krb5int_aes_encrypt_length,
-	and krb5int_aes_dk_encrypt, and krb5int_aes_dk_decrypt for AES.
-
-2003-03-06  Alexandra Ellwood  <lxs@mit.edu>
-
-    * prng.c: use Unix randomness sources on Mac OS X.
-
-2003-03-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (OBJFILELIST, OBJFILEDEP) [##DOS]: Add aes.lst.
-	(all-windows, clean-windows, check-windows): Process aes
-	directory.
-
-2003-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* etypes.c: Include aes_s2k.h.
-	(krb5_enctypes): Add AES enctypes.  Update s2k function names.
-	* pbkdf2.c (krb5int_pbkdf2): Now static.  Output data descriptor
-	is const.
-	(krb5int_pbkdf2_hmac_sha1_128, krb5int_pbkdf2_hmac_sha1_256):
-	Deleted.
-	* string_to_key.c (krb5_c_string_to_key_with_params): Renamed from
-	krb5_c_string_to_key, takes new params argument and passes it
-	through.  Declare before use.
-	(krb5_c_string_to_key): New function, passes null params.
-
-	* t_pkcs5.c (test_pbkdf2_rfc3211): Update calls to
-	krb5int_pbkdf2_hmac_sha1 for new API.
-	* vectors.c (test_mit_des_s2k): Update krb5_des_string_to_key call
-	for new API.
-	* Makefile.in: Update dependencies.
-
-2003-03-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* pbkdf2.c (F): Now takes krb5_data for password and salt.
-	(krb5int_pbkdf2, krb5int_pbkdf2_hmac_sha1,
-	krb5int_pbkdf2_hmac_sha1_128, krb5int_pbkdf2_hmac_sha1_256):
-	Likewise, and for output also.
-	* vectors.c (test_pbkdf2): Calls updated.
-	(main): Run pbkdf2 tests.
-
-2003-02-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* aes: New directory, containing AES implementation from Brian
-	Gladstone, tweaked a little for the krb5 build system.
-	* configure.in: Build its makefile.
-	* Makefile.in (LOCAL_SUBDIRS, LOCALINCLUDES, STOBJLISTS,
-	SUBDIROBJLISTS): Add aes entries.
-
-	* t_cts.c: New test file.
-	* Makefile.in (EXTRADEPSRCS): Add t_cts.
-	(t_cts$(EXEEXT)): New rule.
-
-	* Makefile.in (SRCS, OBJS, STLIBOBJS): Add pbkdf2.
-	(EXTRADEPSRCS): Remove pbkdf2.c.
-	(t_pkcs5$(EXEEXT)): Don't list pbkdf2.$(OBJEXT).
-
-	* t_nfold.c (fold_kerberos): New function.
-	(main): Call it with different lengths.
-	* vectors.c: Include ctype.h and hash_provider.h.
-	(test_nfold, test_mit_des_s2k, test_s2k, test_dr_dk): Test case
-	data now static and const.
-	(test_nfold): Add "Q" and "ba" tests from Simon Josefsson.
-	(GCLEF): New macro.
-	(test_mit_des_s2k): Add GCLEF test case.  Fill in "key" at run
-	time, not as initialization.
-	(test_s2k): Added GCLEF test case.
-	(krb5int_enc_aes128, krb5int_enc_aes256): Declare.
-	(combine_keys, test_des3_combine, k5_des3_make_key): Functions
-	deleted.
-	(whoami): New variable.
-	(printd, printk): New functions.
-	(test_pbkdf2): New function.
-	(main): Initialize whoami.  Test nfold only for now.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* configure.in: Don't explicitly invoke AC_PROG_ARCHIVE,
-	AC_PROG_ARCHIVE_ADD, AC_PROG_RANLIB, AC_PROG_INSTALL.
-
-	* configure.in: Use V5_AC_OUTPUT_MAKEFILE instead of
-	K5_GEN_MAKEFILE and K5_AC_OUTPUT.
-
-	* Makefile.in: Add AC_SUBST_FILE marker for lib_frag and libobj_frag.
-
-2002-12-23  Ezra Peisach  <epeisach@bu.edu>
-
-	* pbkdf2.c, t_encrypt.c, t_hmac.c, t_nfold.c: Cleanup unused
-	variables. Signed vs unsigned cleanup. Ensure variables set before
-	use.
-
-2002-12-19  Ken Raeburn  <raeburn@mit.edu>
-
-	* old_api_glue.c (krb5_encrypt, krb5_decrypt,
-	krb5_calculate_checksum, krb5_verify_checksum): Clean up use of
-	"const" in API.
-
-2002-12-06  Ezra Peisach  <epeisach@bu.edu>
-
-	* Makefile.in (clean): Clean up more test executables and object
-	files.
-
-2002-11-03  Ken Hornstein  <kenh@cmf.nrl.navy.mil>
-
-	* combine_keys.c: Fix up calling convention to match prototype
-	in k5-int.h
-
-2002-10-31  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (check-unix): Don't run t_pkcs5.
-
-2002-10-24  Ken Hornstein  <kenh@cmf.nrl.navy.mil>
-
-	* Makefile.in, combine_keys.c: New file to implement
-	key-combination algorithm.
-
-2002-10-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* pbkdf2.c, t_hmac.c, t_pkcs5.c: New files.
-	* Makefile.in (EXTRADEPSRCS): New variable.
-	(t_hmac$(EXEEXT), t_pkcs5$(EXEEXT), vectors$(EXEEXT)): New
-	targets.
-	(check-unix): Depend on and run t_hmac and t_pkcs5.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-08-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (SUBDIROBJLISTS): New variable.
-
-2002-06-19  Ezra Peisach  <epeisach@bu.edu>
-
-	* Makefile.in (clean): Add t_prng and t_prng.o
-
-2002-06-07  Alexandra Ellwood <lxs@mit.edu>
-	
-	* crypto_libinit.h: Changed macros so you can include
-	crypto_libinit.h and krb5_libinit.h at the same time.
-	[pullup from 1-2-2-branch]
-
-2002-04-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* coll_proof_cksum.c (krb5_c_is_coll_proof_cksum): Rename function
-	from is_coll_proof_cksum, keeping old name as a wrapper function.
-	* keyed_cksum.c (krb5_c_is_keyed_cksum): Likewise.
-	* valid_cksumtype.c (krb5_c_valid_cksumtype): Likewise.
-	* valid_enctype.c (krb5_c_valid_enctype): Likewise.
-
-2002-03-28  Sam Hartman  <hartmans@mit.edu>
-
-	* t_encrypt.c (main): Test krb5_init_keyblock
-
-2002-01-14  Sam Hartman  <hartmans@mit.edu>
-
-	* t_prng.expected: Update to be correct for 0 MSW in v_i calculation.
-
-2002-01-08  Sam Hartman  <hartmans@tir-na-nogth.mit.edu>
-
-	* prng.c (krb5_c_random_os_entropy):  Implement.
-
-2001-12-05  Ezra Peisach  <epeisach@mit.edu>
-
-	* t_encrypt.c (main): Free memory when finished to test for memory
-	leaks.
-
-2001-11-20  Ezra Peisach  <epeisach@mit.edu>
-
-	* Makefile.in (check-unix): Use $(srcdir) in file specification
-	for input to t_prng.
-
-2001-11-19  Sam Hartman  <hartmans@mit.edu>
-
-	* Makefile.in (check-unix): Run t_prng
-
-2001-11-19  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do yarrow subdir on Windows.
-	
-2001-11-19  Sam Hartman  <hartmans@mit.edu>
-
-	* t_prng.c (main): Fix seeding bug in t_prng
-
-	* t_prng.reseedtest: New test; description in t_prng.reseedtest-comments
-
-	* t_prng.c (main): If we request 0 bytes of output don't try to
-	get output 
-
-2001-11-15  Sam Hartman  <hartmans@mit.edu>
-
-	* t_prng.c: New file for PRNG tests
-
-	* prng.c (krb5_c_random_seed): Deprecated in favor of
-	krb5_c_random_add_entropy 
-
-2001-11-14  Sam Hartman  <hartmans@mit.edu>
-
-	* prng.c :  adapt to yarrow
-
-2001-11-09  Sam Hartman  <hartmans@mit.edu>
-
-	* configure.in Makefile.in: Generate makefile for yarrow
-
-2001-11-07  Ken Raeburn  <raeburn@mit.edu>
-
-	* state.c (krb5_c_init_state, krb5_c_free_state): Use
-	KRB5_CALLCONV.
-
-2001-11-06  Sam Hartman  <hartmans@tir-na-nogth.mit.edu>
-
-	* state.c: New file
-
-	* default_state.c: New file.
-
-2001-10-29  Jeff Altman   <jaltman@columbia.edu>
-
-        * Makefile.in - Windows configuration for src/lib/crypto/arcfour
-          directory
-
-2001-10-24  Ezra Peisach  <epeisach@mit.edu>
-
-	* t_encrypt.c: Argument to krb5_c_encrypt_length must be size_t
- 	instead of int (which is the length in krb5_data) or unaligned
- 	access occurs on Dec OSF machines.
-
-2001-10-23  Sam Hartman  <hartmans@mit.edu>
-
-	* Makefile.in (RUN_SETUP): Include so make check works correctly
-
-	* etypes.c: Add Heimdal aliases  arcfour-hmac-md5
-
-	* cksumtypes.c: hmac-md5-rc4 keyed checksum added
-
-	* etypes.c: arcfour-hmac enctype added
-
-	* configure.in Makefile.in :  New subdir: arcfour
-
-	* verify_checksum.c (krb5_c_verify_checksum): Add usage argument to verify call
-
-2001-10-22  Sam Hartman  <hartmans@mit.edu>
-
-	* make_checksum.c (krb5_c_make_checksum):  Include key usage
-
-2001-10-19  Sam Hartman  <hartmans@mit.edu>
-
-	* Makefile.in (check-unix):  Run t_encrypt
-
-	* t_encrypt.c:  New file to contain generic encryption system
-	black-box tests ; currently primitive,  but useful for rc4 work
-
-2001-10-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* block_size.c, checksum_length.c, cksumtype_to_string.c,
-	coll_proof_cksum.c, decrypt.c, encrypt.c, encrypt_length.c,
-	enctype_compare.c, enctype_to_string.c, keyed_checksum_types.c,
-	keyed_cksum.c, make_checksum.c, make_random_key.c, old_api_glue.c,
-	prng.c, string_to_cksumtype.c, string_to_enctype.c,
-	string_to_key.c, valid_cksumtype.c, valid_enctype.c,
-	verify_checksum.c: Don't use KRB5_DLLIMP.  Don't explicitly
-	declare pointers FAR any more.
-
-2001-09-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (SRCS): Use $(srcdir) not $(subdir).
-
-2001-07-08  Ezra Peisach  <epeisach@mit.edu>
-
-	* crypto_libinit.c: Include crypto_libinit.h for prototypes.
-
-2001-07-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* vectors.c: Include string.h.
-	(printhex, printstringhex, printdata, printkey, test_nfold,
-	test_mit_des_s2k, test_s2k, test_des3_s2k, test_des3_combine): Now
-	static.
-	(test_nfold): Pass unsigned first arg to printhex.
-	(test_mit_des_s2k, test_s2k, combine_keys, test_des3_combine,
-	spew_keys, test_dr_dk): Change structure field initializations to
-	assignments, to be palatable to more compilers.
-	(test_s2k): Remove superfluous argument to printf.
-	(test_des3_combine): Return type is void.
-	(keyToData): Drop "inline" spec.
-	(main): Only run some of the tests.
-
-2001-06-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* vectors.c: New file.
-
-2001-06-21  Ezra Peisach  <epeisach@mit.edu>
-
-	* t_nfold.c (main): Cast argument to printf to be consistant with
-	format. 
-
-2001-04-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* make_checksum.c (krb5_c_make_checksum): Add cast assigning to
-	krb5_data data field.
-	* make_random_key.c (krb5_c_make_random_key): Likewise.
-	* hmac.c (krb5_hmac): Likewise.
-	* old-api_glue.c (krb5_init_random_key, krb5_decrypt_data):
-	Likewise.
-	* prng.c (krb5_c_make_random_octets): Likewise.
-	* verify_checksum.c (krb5_c_verify_checksum): Likewise.
-
-	* prng.c (krb5_c_random_seed): Cast argument to krb5_nfold.
-
-	* keyed_cksum.c (is_keyed_cksum): Use -1U to keep compiler quiet,
-	since return type is not signed.
-
-2001-03-14  Ken Raeburn  <raeburn@mit.edu>
-
-	* t_nfold.c: Include assert.h.
-	(printhex, printstringhex, rfc_tests): New routines.
-	(ASIZE): New macro.
-	(main): Call rfc_tests.
-
-2001-03-10  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-	* make_random_key.c, old_api_glue.c: Do not use a variable named
-	random that might shadow a system header file definition.
-
-2001-03-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* cksumtypes.c, etypes.c, prng.c: Use krb5int_ prefix for internal
-	"provider" structures.
-
-2001-03-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* prng.c: Clean up some comments.
-	(enc): Use des3 now.
-
-	* decrypt.c, encrypt.c, hmac.c, make_checksum.c, nfold.c,
-	old_api_glue.c, string_to_key.c, verify_checksum.c: Use const
-	instead of krb5_const.
-
-2001-01-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* make_checksum.c (krb5_c_make_checksum): Clear checksum contents
-	pointer after freeing it in error case.
-
-2000-10-17  Ezra Peisach  <epeisach@mit.edu>
-
-	* nfold.c (krb5_nfold): inbots and outbits are now unsigned int. 
-
-	* prng.c: Local variable random_count is now unsigned int. 
-
-2000-06-30  Ezra Peisach  <epeisach@mit.edu>
-
-	* crypto_libinit.c: Add prototype for prng_cleanup().
-
-2000-06-28  Ezra Peisach  <epeisach@mit.edu>
-
-	* prng.c (prng_cleanup): Ensure memory allocated before calling free.
-
-2000-06-03  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in(LIBMAJOR, LIBMINOR): Bump library version.
-
-2000-05-31  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* configure.in, nfold.c: Check for existance of <memory.h>.
-	[from Nathan Neulinger <nneul@umr.edu>]
-
-2000-01-24  Tom Yu  <tlyu@mit.edu>
-
-	* crypto_libinit.c: Add terminating newline; use 0 and 1 instead
-	of false and true.
-
-Fri Jan 21 22:47:00 2000  Miro Jurisic  <meeroh@mit.edu>
-
-	* Makefile.in: added crypto_libinit.[co]
-	* crypto_libinit.[ch]: new files, contain library initialization
-		and cleanup code
-
-2000-01-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* cksumtypes.c (krb5_cksumtypes_list, krb5_cksumtypes_length): Now
-	const.
-	* cksumtypes.h (krb5_cksumtypes_list, krb5_cksumtypes_length):
-	Updated decls.
-	* etypes.c (krb5_enctypes_list, krb5_enctypes_length): Now const.
-	* etypes.h (krb5_enctypes_list, krb5_enctypes_length): Updated
-	decls.
-	* make_random_key.c (krb5_c_make_random_key): Pointers to
-	enc_provider table now point to const.
-	* prng.c (enc): Now static and const, and points to const.
-	* string_to_key.c (krb5_c_string_to_key): Ditto.
-
-	* hmac.c (krb5_hmac): Put extra parens around if(a=b) constructs
-	to keep gcc happy.
-	* make_random_key.c (krb5_c_make_random_key): Ditto.
-	* old_api_glue.c (krb5_encrypt, krb5_decrypt, krb5_random_key,
-	krb5_calculate_checksum, krb5_verify_checksum, krb5_encrypt_data,
-	krb5_decrypt_data): Ditto.
-	* prng.c (krb5_c_random_make_octets): Ditto.
-	* string_to_key.c (krb5_c_string_to_key): Ditto.
-	* verify_checksum.c (krb5_c_verify_checksum): Ditto.
-
-	* make_checksum.c: Include dk.h.
-
-	* nfold.c (krb5_nfold): Delete unused variables.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-1999-08-26  Tom Yu  <tlyu@mit.edu>
-
-	* etypes.c: Add aliases "des" for "des-cbc-md5", "des3-hmac-sha1"
-	and "des3-cbc-sha1-kd" for "des3-cbc-sha1".
-
-	* cksumtypes.c: Add alias "hmac-sha1-des3-kd".
-
-1999-08-18  Tom Yu  <tlyu@mit.edu>
-
-	* etypes.c: Update des3-cbc-sha1 to alignt with new number
-	assignments.
-
-	* cksumtypes.c: Update hmac-sha1-des3 to align with new number
-	assignments.
-
-Tue May 18 19:52:56 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Remove - from recursive Win32 make invocation.
-
-Mon May 10 15:15:00 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-Tue Jan  5 00:06:02 1999  Tom Yu  <tlyu@mit.edu>
-
-	* make_checksum.c (krb5_c_make_checksum): Note the fact that we're
-	punting on dealing with backwards compat with length-included
-	checksums.
-
-	* etypes.c: Add ENCTYPE_LOCAL_DES3_HMAC_SHA1 as a temporary
-	kludge.  Note that this is added to the end of the array so other
-	code can lop off the last member of the array and the right thing
-	will happen so that it is possible to disable des3-marc-hmac-sha1
-	from the KDC command line, for instance.
-
-	* configure.in: Conditionalize ATHENA_DES3_KLUDGE on
-	--enable-athena.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
-Thu Dec  3 23:37:28 1998  Theodore Y. Ts'o  <tytso@mit.edu>
-
-	* Makefile.in: Added missing "cd .." necessary for making this
- 		compile under Windows.  Also added missing *.lst files to
- 		OBJFILELIST.
-
-Fri Nov  6 10:23:32 1998  Ezra Peisach  <epeisach@mit.edu>
-
-	* keyhash_provider/Makefile.in: Fix to allow building out of the
- 	source tree.
-
-Tue Sep 22 21:19:01 1998  Tom Yu  <tlyu@mit.edu>
-
-	* prng.c (krb5_c_random_make_octets): Fix to nfold into 15 bytes,
-	not one byte.
-
-Mon Sep 21 15:23:19 1998  Tom Yu  <tlyu@mit.edu>
-
-	* prng.c (krb5_c_random_seed): Fix memory leak.
-
-Mon Sep 14 23:21:17 1998  Tom Yu  <tlyu@mit.edu>
-
-	* old/decrypt.c (krb5_old_decrypt): Fix memory leak.
-
-Tue Sep  1 19:33:38 1998  Tom Yu  <tlyu@mit.edu>
-
-	* etypes.c: Add ETYPE_LOCAL_DES3_HMAC_SHA1 to deal with marc's
-	des3 code.  ETYPE_DES3_HMAC_SHA1 remains the same for now.
-
-Mon Aug 17 23:40:11 1998  Tom Yu  <tlyu@mit.edu>
-
-	* keyhash_provider/k5_md4des.c (k5_md4des_verify): Add
-	compatibility for krb5-beta5 checksums.
-
-	* keyhash_provider/k5_md5des.c (k5_md5des_verify): Add
-	compatibility for krb5-beta5 checksums.  Fix typos similar to
-	those corrected in k5_md4des.c.
-
-Sun Jul 19 12:00:00 1998  Marc Horowitz <marc@mit.edu>
-
-	* *.c: replace the crypto layer.
-
-Wed Apr 15 18:02:44 1998  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in (LIB): Rename to k5crypto.
-
-Wed Feb 18 16:05:11 1998  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in: Remove trailing slash from thisconfigdir.  Fix up
-	BUILDTOP for new conventions.
-
-Fri Feb 13 15:19:37 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Define LOCAL_SUBDIRS to recurse into the
-		subdirectories (crc32, md5, os, etc.)
-
-	* configure.in: Create the makefiles for all of the subdirectories
-		and move all of the configure.in tests from the
-		subdirectories into this configure.in.
-	
-Mon Feb  2 17:02:29 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* configure.in: Use AC_CONFIG_DIRS instead of CONFIG_DIRS, and
-		remove use of DO_SUBDIRS.
-
-	* Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile
-
-Tue Oct 14 15:34:44 1997  Tom Yu  <tlyu@voltage-multiplier.mit.edu>
-
-	* Makefile.in: Bump major version due to possible size changes.
-
-Fri Feb 21 18:40:13 1997  Sam Hartman  <hartmans@tertius.mit.edu>
-
-	* Makefile.in (OBJS): Move in crypto_glue.c as krb5_glue.c; avoid
-        libcrypto depending on libkrb5
-     
-
-Sat Feb 22 01:37:23 1997  Sam Hartman  <hartmans@luminous.MIT.EDU>
-
-	* Makefile.in (LIBMINOR): Bump minor version
-
-Sun Dec 29 21:52:44 1996  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in:
-	* configure.in: Update to use new library build procedure.
-
-Sat Nov 23 00:22:20 1996  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* cryptoconf.c: Also zero out the entries in cryptoconf, to make
-		sure no one tries to use triple DES and SHA.
-
-Fri Nov 22 20:49:13 1996  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* configure.in (enableval): Disable triple DES and SHA, since
-		what's there isn't the final triple DES.  [PR#231]
-
-Mon Nov 18 20:38:24 1996  Ezra Peisach  <epeisach@mit.edu>
- [krb5-libs/201]
-	* configure.in: Set shared library version to 1.0.
-
-Thu Jun  6 00:04:38 1996  Theodore Y. Ts'o  <tytso@mit.edu>
-
-	* Makefile.in (all-windows): Don't pass $(LIBCMD) on the command
-		line.  It's set in the windows.in prologue for all Makefiles anyway.
-
-Thu Jun  6 00:03:05 1996  Theodore Y. Ts'o  <tytso@mit.edu>
-
-	* Makefile.in (MAC_SUBDIRS): Include sha in the list of
-		subdirectories for the Macintosh
-
-Mon May 20 10:59:23 1996  Tom Yu  <tlyu@dragons-lair.MIT.EDU>
-
-	* Makefile.in (libcrypto.$(STEXT): deal with new improved
-		libupdate
-
-Sat May 18 13:34:01 1996  Ezra Peisach  (epeisach@paris)
-
-	* des3_sha.c: Add static keywords in function declarartions to
-		match earlier declarations. 
-
-Tue May 14 15:14:20 1996  Richard Basch  <basch@lehman.com>
-
-	* cryptoconf.c:
-		replaced sha-des3 cksum with hmac-sha
-
-	* des_crc.c des_md5.c:
-		set the length field of the cksum structure.
-
-	* des3_sha.c:
-		Increase the confounder length to 24 bytes.
-		Set the length of the cksum structure.
-
-Fri May 10 01:34:46 1996  Richard Basch  <basch@lehman.com>
-
-	* configure.in cryptoconf.c des3_sha.c:
-	Support enctype-des3-sha, cksum-sha, cksum-sha-des3
-
-	* Removed des3_md5.c (and all des3-md5 support).
-
-Tue Apr 30 00:38:14 1996  Ken Raeburn  <raeburn@cygnus.com>
-
-	* Makefile.in (libcrypto.$(STEXT)): Remove before creating.
-
-Thu May  2 18:48:35 1996  Richard Basch  <basch@lehman.com>
-
-	* des3_md5.c des3_raw.c: use the new common random routines for
-		des & des3 (the old des3 routines have been removed)
-
-Sat Mar 30 22:52:46 1996  Theodore Y. Ts'o  <tytso@dcl>
-
-	* cryptoconf.c: Fixed comments describing the various checksum
-	        types.  (Added numbers, and fixed a mistake in a
-		description of an undefined checksum type.)
-
-Thu Mar 28 09:49:08 1996  Richard Basch  <basch@lehman.com>
-
-	* cryptoconf.c: Added support for CKSUMTYPE_RSA_MD5_DES3 and
-		ENCTYPE_DES3_CBC_RAW
-
-	* des3_md5.c: Abstraction correction: use sizeof(mit_des3_cblock)
-
-	* configure.in:
-		Cosmetic renaming of des-cbc-raw configuration vars.
-		Added support for des3-cbc-raw.
-
-	* des3_raw.c: New file (support ENCTYPE_DES3_CBC_RAW)
-
-Mon Mar 11 10:59:40 1996  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-	* des_crc.c (mit_des_crc_decrypt_func): Add const to pointer
-		cast for suncc warning.
-
-Wed Feb  7 00:23:18 1996  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in: Folded in danw's changes to allow
-		building Makefiles for the Macintosh.  We now can build
-		MPW makefiles which are interpreted by CodeWarrior.
-
-Mon Nov 13 11:30:10 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* encrypt_data.c (krb5_encrypt_data): New file.  A generic routine
-		for encrypting data in a krb5_data structure.  Fills in a
-		krb5_enc_data structure.
-
-	* decrypt_data.c (krb5_decrypt_data): New file.  A generic routine
-		for decrypting data in a krb5_enc_data structure.  Fills
-		in a krb5_data structure.
-
-	* Makefile.in (SRCS): Added decrypt_data.c and encrypt_data.c to
-		list of files to be compiled.
-
-Fri Oct  6 22:01:04 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in: Remove ##DOS!include of config/windows.in.
-		config/windows.in is now included by wconfig.
-
-Thu Oct  5 21:32:33 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* cryptoconf.c: Change types of krb5_max_enctype and
-		krb5_max_cksumtype to be krb5_enctype and krb5_cksumtype,
-		to fix some gcc -Wall flames.
-
-Mon Oct  2 10:34:12 1995  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-	* configure.in (V5_MAKE_SHARED_LIB): Change for version 0.1 of
-		shared library. Remove install lines which are in aclocal.m4
-
-Mon Sep 25 16:26:53 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in: Removed "foo:: foo-$(WHAT)" lines from the
-		Makefile. 
-
-	* configure.in: Don't include "all:: all-$(WHAT)" at the end of
-		the Makefile.  That's now included at the very beginning
-		by pre.in
-
-Wed Sep 13 10:26:37 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: moved shared rule to all-unix:: target.
-	* des_crc.c, des_md5.c, raw_des.c: had a volatile/const mismatch
-	   which needs a cast to resolve.
-
-Wed Sep 06 14:20:57 1995   Chris Provenzano (proven@mit.edu)
-
-        * cryptoconf.c, des_crc.c, des_md5.c raw_des.c
-		s/keytype/enctype/g, s/KEYTYPE/ENCTYPE/g
-
-Tue Sep 05 22:10:34 1995   Chris Provenzano (proven@mit.edu)
-
-        * cryptoconf.c : Remove krb5_csarray.
-	* cryptoconf.c, des_crc.c, des_md5.c, raw_des.c : Remove krb5_enctype 
-		references, and replace with krb5_keytype where appropriate.
-
-Thu Aug 24 17:55:47 1995  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-	* des_crc.c, des_md5.c, raw_des.c: Remove casting in call to
-		mit_des_cbc_encrypt. 
-
-Thu Jul 27 15:15:46 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* configure.in - Add --enable-{des-cbc-md5,des-cbc-crc,raw-des-cbc,
-		des-cbc-cksum,crc32,rsa-md4,rsa-md5} which set the appropriate
-		preprocessor flags which used to be set in k5-config.h.
-	* cryptoconf.c - Set the KEYTYPE_DES entry to the DES-CBC-MD5 entry
-		if enabled, then the DES-CBC-CRC entry, if enabled, then to
-		null.
-
-Fri Jun 23 12:16:52 1995  Sam Hartman  <hartmans@tardis.MIT.EDU>
-
-	* configure.in: krb5_cv_staticlibs_enabled, not
-        krb5_cv_enable_staticlibs
-
-Thu Jun 22 18:34:26 1995  Sam Hartman  (hartmans@tardis)
-
-	* configure.in: Changed to new scheme for static libs.
-
-
-
-Fri Jun 16 11:14:50 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* configure.in - Add install target for shared library.
-
-
-Thu Jun 15 17:58:41 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* Makefile.in - Add definitions for shared library building rules.
-		Add explicit dependency on "shared" since we probably need it.
-	* configure.in - Create symlinks for archive and shared library when
-		we build them.
-
-Fri Jun  9 18:52:19 1995    <tytso@rsx-11.mit.edu>
-
-	* des_crc.c, des_md5.c: Fix -Wall nits.
-
-	* configure.in: Remove standardized set of autoconf macros, which
-		are now handled by CONFIG_RULES.  Use DO_SUBDIRS to
-		recurse down subdirectories.
-
-Thu May 25 22:15:18 1995  Theodore Y. Ts'o  (tytso@dcl)
-
-	* configure.in, Makefile.in: Add support for shared libraries.
-
-Thu Apr 13 15:49:16 1995 Keith Vetter (keithv@fusion.com)
-
-	* *.[ch]: removed unneeded INTERFACE from non-api functions.
-        * *.h added FAR to pointers visible at to the world.
-
-Tue Mar 28 20:00:00 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: more of nmake's strange behavior. Problem goes
-	   away with the addition of a nop line.
-
-Wed Mar 22 11:28:08 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: put back '##DOSLIBNAME' since it makes the .c.obj rule
-	   put the object file into that library.
-	* Makefile.in: strange nmake error 'missing ) on macro invocation' 
-	   which only appeared intermitantly and only when invoked 
-           recursively. Fixed (I hope) by interchanging some lines.
-
-Thu Mar 16 21:10:37 1995  John Gilmore  (gnu at toad.com)
-
-	* Makefile.in (CFLAGS):  Avoid continuation line that starts with
-	dash; it confuses the Unix->MPW makefile converter.
-	(##DOSLIBNAME):  No longer needed since DLL built one level up.
-	(all-mac):  Add.
-	(libcrypto.a):  Use explicit "./" on paths to DONE files, to
-	help Unix->MPW makefile converter with rotten Mac pathname conventions.
-
-Wed Mar 15 20:23:17 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: cleaned up for the PC
-
-Tue Mar 14 17:31:01 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: removed all DLL stuff--it now happens up a directory.
-	* win_glue.c, libcrypto.def: removed
-
-Tue Mar 7 17:26:06 1995 Keith Vetter (keithv@fusion.com)
-
-	* cryptoco.c: Added more windows syntactic sugar for segmenting.
-
-Fri Mar 3 19:15:54 1995 Keith Vetter (keithv@fusion.com)
-
-	* libcrypto.def: added 3 entry points for methods for pulling
-           in data from a DLL.
-        * Makefile.in: libcrypto.lib depends upon libcrypto.def
-
-Thu Mar 2 17:43:25 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: added rules to make a DLL from a lib.
-        * win_glue.c, librcrypto.def: needed for making a DLL.
-
-Tue Feb 28 00:15:06 1995  John Gilmore  (gnu at toad.com)
-
-	* cryptoconf.c, des_md5.c:  Avoid <krb5/...> includes.
-
-Fri Feb  3 02:44:07 1995  John Gilmore  <gnu@cygnus.com>
-
-	Rename files so that they work in the DOS LIB command,
-	which amazingly finds dashes in mid-name and treats them
-	like option switches.
-
-	* des-crc.c => des_crc.c
-	* des-md5.c => des_md5.c
-	* raw-des.c => raw_des.c
-	* Makefile.in:  changed to match.
-
-Thu Feb  2 02:59:58 1995  John Gilmore  <gnu@cygnus.com>
-
-	* Makefile.in (CFLAGS):  Handle $(srcdir) properly in -I options.
-
-Wed Jan 25 19:55:59 1995  John Gilmore  (gnu at toad.com)
-
-	* Makefile.in (CFLAGS):  Add -I options to pick up include files
-	from the various algorithm subdirs.
-	* cryptoconf.c, des-crc.c, des-md5.c, raw-des.c:  Replace most
-	<.../...> include files with "..." includes.
-
-Tue Oct 18 15:46:01 1994  Mark Eichin  (eichin@cygnus.com)
-
-	* des-crc.c (mit_des_crc_decrypt_func): cast key->key->contents to
-	krb5_pointer to satisfy sunos cc about :? argument types.
-	(mit_des_crc_encrypt_funct): ditto.
-	* raw-des.c (mit_raw_des_decrypt_func): ditto.
-	(mit_raw_des_encrypt_func): ditto.
-	* des-md5.c (mit_des_md5_decrypt_funct): cast zero_ivec.
-	(mit_des_md5_encrypt_funct): ditto.
-
-Fri Oct 14 00:37:08 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-    	* cryptoconf.c: Add support for the new cryptosystem DES/MD5.
-
-	* Makefile.in: Add support for new files des-crc.c, des-md5.c, and
-		raw-des.c
-
-Thu Oct  6 20:07:41 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* configure.in: Add recursive "make check" target.
-
-Mon Oct  3 21:11:56 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* Makefile.in: make install obey $(DESTDIR)
-
-Thu Aug  4 03:40:24 1994  Tom Yu  (tlyu@dragons-lair)
-
-	* configure.in: oops check for install
-
-	* Makefile.in: make install fixes
-
diff --git a/src/lib/crypto/aes/ChangeLog b/src/lib/crypto/aes/ChangeLog
deleted file mode 100644
index 421f815706..0000000000
--- a/src/lib/crypto/aes/ChangeLog
+++ /dev/null
@@ -1,94 +0,0 @@
-2006-04-02  Ken Raeburn  <raeburn@mit.edu>
-
-	* uitypes.h: Include autoconf.h.
-
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2006-03-30  Ken Raeburn  <raeburn@mit.edu>
-
-	* aesopt.h: Include autoconf.h.
-
-2005-05-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (aes-gen): Use CC_LINK.  Reported by Mike Friedman.
-
-2005-04-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* aesopt.h: On PalmOS, include FloatMgr.h to get endianness flag.
-	(ENC_UNROLL, DEC_UNROLL, ENC_ROUND, LAST_ENC_ROUND, DEC_ROUND,
-	LAST_DEC_ROUND, KEY_SCHED): If CONFIG_SMALL is defined, set to
-	NONE or NO_TABLES as appropriate.
-
-	* aes_s2k.c (krb5int_aes_string_to_key): Widen bytes of iteration
-	count before shifting.
-
-	* Makefile.in (all-unix): Don't build aes-gen by default, leave it
-	for 'make check'.
-
-2004-09-28  Ken Raeburn  <raeburn@mit.edu>
-
-	* vbaxam.doc: File deleted.
-
-2004-05-25  Tom Yu  <tlyu@mit.edu>
-
-	* aesopt.h (PLATFORM_BYTE_ORDER): Treat _WIN32 as always
-	little-endian.  Default to little-endian if there's no other
-	compile-time way to detect endianness, noting it as a guess.
-	(SAFE_IO): Error out if SAFE_IO is not set and endianness was
-	guessed.
-
-2004-05-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (aes-test): Link test program against thread support
-	library.
-
-2004-05-07  Ken Raeburn  <raeburn@mit.edu>
-
-	* aesopt.h (PLATFORM_BYTE_ORDER): Check for _MIPSEB, _MIPSEL.  If
-	endian.h or machine/endian.h is available, include it instead of
-	sys/param.h.  Don't mess around with multibyte character
-	constants.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-05-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* aes_s2k.c (DEFAULT_ITERATION_COUNT): New macro; define to 4096.
-	(MAX_ITERATION_COUNT): New macro.
-	(krb5int_aes_string_to_key): Use them.
-
-2003-04-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* uitypes.h: Use inttypes.h if HAVE_INTTYPES_H is defined.
-
-2003-04-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* aes_s2k.c (krb5int_aes_string_to_key): Return an error if the
-	supplied iteration count is really, really large.
-
-2003-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* aes_s2k.c, aes_s2k.h: New files.
-	* Makefile.in (STLIBOBJS, OBJS, SRCS): Build aes_s2k.
-	(LOCALINCLUDES): Add dk directory.
-	(GEN_OBJS): New variable.
-	(aes-gen): Use GEN_OBJS.
-
-2003-02-28  Ezra Peisach  <epeisach@bu.edu>
-
-	* Makefile.in (clean): Cleanup testing objects and outputs
-
-2003-02-05  Ezra Peisach  <epeisach@.bu.edu>
-
-	* Makefile.in (run-aes-test): Add $(RUN_SETUP) so that if
-	compiling only shared libraries, LD_LIBRARY_PATH is set for test.
-
-2003-02-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* New directory, with Briad Gladstone's implementation of AES,
-	tweaked for the MIT krb5 build system.
-
diff --git a/src/lib/crypto/arcfour/ChangeLog b/src/lib/crypto/arcfour/ChangeLog
deleted file mode 100644
index fb2680c4de..0000000000
--- a/src/lib/crypto/arcfour/ChangeLog
+++ /dev/null
@@ -1,119 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2005-10-19  Ken Raeburn  <raeburn@mit.edu>
-
-	* arcfour_s2k.c (asctouni): Counter should be size_t, like len.
-
-2005-07-02  Ken Raeburn  <raeburn@mit.edu>
-
-	* arcfour_s2k.c: Renamed from string_to_key.c.
-	* Makefile.in (STLIBOBJS, OBJS, SRCS): Updated accordingly.
-
-2004-09-21  Sam Hartman  <hartmans@mit.edu>
-
-	* string_to_key.c (krb5int_arcfour_string_to_key): Free the copy
-	of the password, thanks to Derrick Schommer 
-
-2004-02-18  Ken Raeburn  <raeburn@mit.edu>
-
-	* arcfour.c: Use ANSI C style function definitions.
-
-2003-12-19  Ken Raeburn  <raeburn@mit.edu>
-
-	* arcfour.c (l40): Now const.
-
-2003-07-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* arcfour.c (krb5_arcfour_encrypt_length, krb5_arcfour_encrypt,
-	krb5_arcfour_decrypt): Use new numeric fields for block/hash/key
-	sizes instead of calling functions.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* arcfour.c (krb5int_arcfour_string_to_key): Renamed from
-	krb5_... and added new s2k-params argument, which must be null.
-	* arcfour.h: Updated.
-
-2003-02-03  Sam Hartman  <hartmans@mit.edu>
-
-	* arcfour.c (krb5_arcfour_encrypt_length): l40, the 40-bit
-	constant should be static 
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-05-13  Sam Hartman  <hartmans@mit.edu>
-
-	* arcfour.c: Microsoft indicates that they have changed some key
-	usage numbers to be closer to the Kerberos spec; reflect those
-	changes.  This is OK because currently no one actually sends any
-	authorization data in that space.
-2002-02-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* arcfour.h, arcfour.c, string_to_key.c: Use const instead of
-	krb5_const.
-
-2001-12-05  Ezra Peisach  <epeisach@mit.edu>
-
-	* string_to_key.c (krb5_arcfour_string_to_key): Use size_t instead
-	of int for local variable.
-	(asctouni): Length argument now size_t instead of int.
-
-2001-11-07  Sam Hartman  <hartmans@mit.edu>
-
-	* arcfour.c (krb5_arcfour_encrypt): Set output length
-	(ms_translate_usage): Be consistent with latest mail from Microsoft
-
-2001-11-06  Sam Hartman  <hartmans@mit.edu>
-
-	* arcfour-int.h: Structure for arcfour cipher state
-	
-2001-10-26  Ezra Peisach  <epeisach@mit.edu>
-
-	* string_to_key.c (krb5_arcfour_string_to_key): Cleanup variables
-	defined but not used.
-
-2001-10-25  Sam Hartman  <hartmans@mit.edu>
-
-	* arcfour.c: GSSAPI usage translations
-
-2001-10-24  Ezra Peisach  <epeisach@mit.edu>
-
-	* arcfour.h: Declare krb5int_enc_arcfour extern so that multiple
-	copies are not generated (etypes.c, and arcfour.c).
-
-2001-10-22  Sam Hartman  <hartmans@mit.edu>
-
-	* arcfour-int.h: Make krb5int_arcfour_translate_usage non-static so the hash can use it
-	
-
-2001-10-19  Sam Hartman  <hartmans@mit.edu>
-
-	* string_to_key.c (krb5_arcfour_string_to_key): Ignore salt
-	(krb5_arcfour_string_to_key): Use memset not bzero
-
-	* arcfour.c (krb5_arcfour_decrypt): Return error if salt cannot be allocated
-	(krb5_arcfour_encrypt): Only memset bits of key to known value on export-grade crypto
-
-2001-10-18  Sam Hartman  <hartmans@mit.edu>
-
-	* arcfour.c (arcfour_translate_usage): Attempt to implement based
-	on draft-brezak-win2k-krb-rc4-hmac-03.  Several usages remain unclear.
-	Make 40-bit string not unsigned to avoid warning
-	(krb5_arcfour_encrypt krb5_arcfour_decrypt):  cast to avoid pointer warnings
-
diff --git a/src/lib/crypto/crc32/ChangeLog b/src/lib/crypto/crc32/ChangeLog
deleted file mode 100644
index b8712ac794..0000000000
--- a/src/lib/crypto/crc32/ChangeLog
+++ /dev/null
@@ -1,258 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2005-12-02  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (t_crc): Build against support library.
-	(check-unix): Use $(RUN_SETUP).
-
-2005-05-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* t_crc.c (main): Don't run timing test for now.
-
-2005-01-07  Ken Raeburn  <raeburn@mit.edu>
-
-	* crc-32.h (mit_crc32): Remove gratuitous "const" in argument
-	declaration.
-
-2004-03-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* t_crc.c (timetest): Free 'block' before returning.
-	(verify): Fix minor type error in call to gethexstr.
-
-2004-02-18  Ken Raeburn  <raeburn@mit.edu>
-
-	* crc32.c: Use ANSI C style function definitions.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-12-23  Ezra Peisach  <epeisach@bu.edu>
-
-	* t_crc.c: Declare local functions static. 
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-06-19  Ezra Peisach  <epeisach@bu.edu>
-
-	* Makefile.in (clean-unix): Remove t_crc.o and t_crc.
-
-2002-01-07  Tom Yu  <tlyu@mit.edu>
-
-	* crc.pl: New file; perl script to do generate some test vectors
-	and CRC tables.
-
-	* CRC.pm: New file; perl module to implement CRCs in terms of
-	polynomial arithmetic (verrrry slooow).
-
-	* Poly.pm: New file; perl module to do polynomial arithmetic in
-	the field of integers mod 2.
-
-	* t_crc.c: New file; do some sanity checks (and timing checks,
-	more useful when building shift-4 as well).
-
-	* Makefile.in (check-unix): Add rules for building, running
-	t_crc.
-
-	* crc32.c (mit_crc32_shift4): Add new function, usually not
-	compiled, for shift-4 implementation of CRC32.
-
-	* crc-32.h: Add (conditionalized) prototype for the shift-4
-	function; remove checksum_entry (it's no longer used).
-
-	* crctest.c: Removed.
-
-	* crc-test: Removed.
-
-	* crc.c: Removed.
-
-2001-10-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* crc.c: Make prototypes unconditional.
-
-2001-10-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* crc.c: Don't declare pointers FAR any more.
-
-2001-03-14  Ken Raeburn  <raeburn@mit.edu>
-
-	* crc-32.h: Stop using PROTOTYPE macro.
-
-2001-03-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* crc-32.h, crc.c, crc32.c: Use const instead of krb5_const.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-Mon May 10 15:15:59 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
-Sun Jul 19 12:00:00 1998  Marc Horowitz <marc@mit.edu>
-
-	* *.c: replace the crypto layer.
-
-Wed Feb 18 16:05:45 1998  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in: Remove trailing slash from thisconfigdir.  Fix up
-	BUILDTOP for new conventions.  Fix up usage of $(C).
-
-Fri Feb 13 15:20:54 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in (thisconfigdir), configure.in: Point the
- 		configuration directory at our parent, and remove our
-		local configure.in
-
-Mon Feb  2 17:02:29 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile
-
-Sat Feb 22 18:46:38 1997  Richard Basch  <basch@lehman.com>
-
-	* Makefile.in: Move list file construction to win-post.in
-
-Thu Jan 30 21:30:32 1997  Richard Basch  <basch@lehman.com>
-
-	* crc.c: Declare the functions to take const pointers, where possible.
-
-Thu Nov 21 00:58:04 EST 1996    Richard Basch   <basch@lehman.com>
-
-	* Makefile.in: Win32 build
-
-Sun Dec 29 21:53:25 1996  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in:
-	* configure.in: Update to use new library building procedure.
-
-Tue May 14 19:33:27 1996  Richard Basch  <basch@lehman.com>
-
-	* crc.c: ensure the cksum content length is sufficient
-
-	* crctest.c: set the cksum length field.
-
-Sat Mar 30 22:54:12 1996  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in (SRCS): Removed crctest.c from the SRCS list, since
-		it's only a test program and it confuses the Macintosh build.
-
-Fri Oct  6 21:59:30 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in (CFLAGS): Remove ##DOS!include of config/windows.in.
-		config/windows.in is now included by wconfig.
-
-Mon Sep 25 16:48:23 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in: Removed "foo:: foo-$(WHAT)" lines from the
-		Makefile. 
-
-Wed Sep 13 10:28:47 1995 Keith Vetter (keithv@fusion.com)
-
-	* crc.c: put function prototype back in.
-
-Fri Jul 7 16:10:52 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* crc.c - Use CRC32_CKSUM_LENGTH where appropriate.  Add checksum
-		verifier procedure.
-
-Wed Jun 21 10:51:33 1995    <tytso@rsx-11.mit.edu>
-
-	* crc.c: Change PROTOTYPE -> KRB5_PROTOTYPE
-
-Fri Jun  9 19:18:36 1995    <tytso@rsx-11.mit.edu>
-
-	* configure.in: Remove standardized set of autoconf macros, which
-		are now handled by CONFIG_RULES.
-
-Thu May 25 22:15:49 1995  Theodore Y. Ts'o  (tytso@dcl)
-
-	* configure.in, Makefile.in: Add support for shared libraries.
-
-Thu Apr 13 15:49:16 1995 Keith Vetter (keithv@fusion.com)
-
-	* *.[ch]: removed unneeded INTERFACE from non-api functions.
-        * *.h added FAR to pointers visible at to the world.
-
-Thu Mar 16 21:14:15 1995  John Gilmore  (gnu at toad.com)
-
-	* Makefile.in (crctest, crctest.exe):  Replace crctest-unix and
-	crctest-windows with versions that work for Mac too.
-	(check):  Build and run crctest$(EXEEXT).  This runs on MPW now.
-
-Tue Mar 14 17:20:47 1995 Keith Vetter (keithv@fusion.com)
-
-	* crc.c: removed method for pulling in a data structure (windows),
-           and turned an int into a size_t for corrected 'signed'ness.
-
-Fri Mar 3 19:01:59 1995 Keith Vetter (keithv@fusion.com)
-
-	* crc.c: added a method to pull in a data structure 
-           from outside a dll.
-
-Thu Mar 2 17:48:08 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: changed LIBNAME for the PC
-        * crc.c, crctest.c: added cast on the assignment of bits of
-           a long into characters.
-
-Mon Feb 20 15:37:10 1995 Keith Vetter (keithv@fusion.com)
-
-	* crc.c: changed API to INTERFACE
-
-Fri Feb 20 11:08:00 1995 Keith Vetter (keithv@fusion.com)
-
-	* crc.c: added function prototype and removed a function
-	   pointer cast.
-
-Mon Feb 6 19:24:13 1995 Keith Vetter (keithv@fusion.com)
-
-        * Makefile.in: made to work under Windows
-           - added windows only make preamble 
-           - moved the all target after the objects it depends on
-           - used $(OBJEXT) and $(EXEEXT) where needed
-           - split crctest into unix rules and windows rules
-           - changed file separatars into macros where needed
-        * crctest.c: changed int to long to work on 16 bit machines
-        * crc.c: added Windows calling convention to the function
-           and casted the assignment of the function.
-
-
-Wed Jan 25 20:01:33 1995  John Gilmore  (gnu at toad.com)
-
-	* crc-32.h:  New file, moved from include/krb5/crc-32.h.
-	* crc.c, crctest.c:  Replace <.../...> includes with "..."s.
-
-Wed Oct 19 12:27:16 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-    	* Makefile.in: Don't use LDFLAGS, but CCFLAGS since CCFLAGS is
-		configurable.
-
-Wed Oct 12 02:24:04 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* Makefile.in: Run crctest on a "make check".  Clean up the
-		crctest program on a "make clean".
-
-Tue Oct  4 14:53:54 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* crc.c: Added placeholder for magic number
-
diff --git a/src/lib/crypto/des/ChangeLog b/src/lib/crypto/des/ChangeLog
deleted file mode 100644
index 12505a2ae8..0000000000
--- a/src/lib/crypto/des/ChangeLog
+++ /dev/null
@@ -1,769 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2006-01-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (destest$(EXEEXT)): Include support library.
-
-2005-06-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* destest.c (main): Force testing of unaligned access to input,
-	output, and key blocks.
-
-2005-06-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* f_tables.h: Include k5-platform.h.
-	(GET_HALF_BLOCK): Use load_32_be.
-	(PUT_HALF_BLOCK): Use store_32_be.
-
-2005-04-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* d3_cbc.c (krb5int_des3_cbc_encrypt, krb5int_des3_cbc_decrypt):
-	Don't declare left and right variables as registers.
-	* f_cksum.c (mit_des_cbc_cksum): Likewise.
-	* f_cbc.c (krb5int_des_cbc_encrypt, krb5int_des_cbc_decrypt):
-	Likewise.
-	(krb5int_des_cbc_encrypt): For full blocks, use GET_HALF_BLOCK to
-	read and then xor, instead of processing each byte individually.
-	(krb5int_des_do_encrypt_2, krb5int_des_do_decrypt_2)
-	[CONFIG_SMALL]: New functions, wrapping large macros with the DES
-	inner loops.
-	* f_tables.h (DES_DO_ENCRYPT_1, DES_DO_DECRYPT_1): Renamed from
-	non-_1 names.
-	(krb5int_des_do_encrypt_2, krb5int_des_do_decrypt_2): Declare if
-	CONFIG_SMALL is defined.
-	(DES_DO_ENCRYPT, DES_DO_DECRYPT): Expand to _1 macros or _2
-	function calls depending on whether CONFIG_SMALL is defined.
-
-2004-05-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (verify, t_afss2k): Link test programs against
-	thread support library.
-
-2004-04-02  Ken Raeburn  <raeburn@mit.edu>
-
-	* string2key.c: Replaced with a new implementation.
-
-2004-02-18  Ken Raeburn  <raeburn@mit.edu>
-
-	* afsstring2key.c, d3_cbc.c, d3_kysched.c, f_cbc.c, f_cksum.c,
-	f_parity.c, f_sched.c, key_sched.c, string2key.c, weak_key.c: Use
-	ANSI C style function definitions.
-
-2004-02-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* f_tables.h (DES_DO_ENCRYPT, DES_DO_DECRYPT): Allocate temporary
-	variable locally instead of taking the extra argument.
-	* d3_cbc.c (krb5int_des3_cbc_encrypt): Don't pass the extra
-	argument, and delete the automatic variable.
-	(krb5int_des3_cbc_decrypt): Likewise.
-	* f_cbc.c (krb5int_des_cbc_encrypt, krb5int_des_cbc_decrypt):
-	Likewise.
-	* f_cksum.c (mit_des_cbc_cksum): Likewise.
-
-	* afsstring2key.c (krb5_afs_encrypt): Drop EDFLAG as an argument,
-	make it local instead, since we always pass 0.
-	(afs_crypt): Call changed.
-	(krb5_afs_crypt_setkey, krb5_afs_encrypt): Use memcpy.
-
-2003-12-19  Ken Raeburn  <raeburn@mit.edu>
-
-	* f_cbc.c (mit_des_zeroblock): Define, as a single cblock, not the
-	array of 8 that was used elsewhere.
-	* des_int.h (mit_des_zeroblock): Declare, and use a macro to stick
-	a krb5int prefix on it.
-
-2003-07-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* f_cbc.c (krb5int_des_cbc_decrypt): Move declarations that were
-	after statements after flattening blocks is previous change.
-	* d3_cbc.c (krb5int_des3_cbc_decrypt): Likewise.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* f_cbc.c (krb5int_des_cbc_encrypt, krb5int_des_cbc_decrypt): New
-	functions broken out from mit_des_cbc_encrypt.
-	(mit_des_cbc_encrypt): Call them.
-	* d3_cbc.c (krb5int_des3_cbc_encrypt, krb5int_des3_cbc_decrypt):
-	New functions broken out from mit_des3_cbc_encrypt.
-	(mit_des3_cbc_encrypt): Call them.
-	* des_int.h (krb5int_des_cbc_encrypt, krb5int_des_cbc_decrypt,
-	krb5int_des3_cbc_encrypt, krb5int_des3_cbc_decrypt): Declare.
-	(mit_des_cbc_encrypt, mit_des3_cbc_encrypt): New macros.
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-03-06  Alexandra Ellwood  <lxs@mit.edu>
-
-    * des_int.h: Added prototype for mit_afs_crypt which is used by
-    the deprecated KfM des_crypt function. 
-
-2003-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* des_int.h (krb5_raw_des_cst_entry, krb5_des_crc_cst_entry,
-	krb5_des_md5_cst_entry, krb5_des3_sha_cst_entry,
-	krb5_des3_raw_cst_entry, krb5_des_cbc_cksumtable_entry): Delete
-	unused declarations.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-12-23  Ezra Peisach  <epeisach@bu.edu>
-
-	* t_verify.c: Signed vs. unsigned cleanups. Remove unsused variables.
-
-2002-10-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* string2key.c (mit_des_string_to_key_int): If PRINT_TEST_VECTORS
-	is defined, print some of the intermediate results.
-
-2002-09-26  Tom Yu  <tlyu@mit.edu>
-
-	* afsstring2key.c (krb5_afs_crypt): Leak this function out as as
-	mit_afs_crypt to allow for des_crypt and des_fcrypt
-	implementations for the KfM merge.
-
-	* des_int.h: Change DES_INT32 strategy to include kerberosIV/des.h
-	with a magic macro defined for skipping krb4-specific stuff.  Make
-	renaming of make_key_sched explicit, to avoid conflict with
-	kerberosIV/des.h.
-
-	* f_sched.c, key_sched.c, d3_kysched.c: Make renaming of
-	make_key_sched explicit.
-
-	* f_cksum.c (mit_des_cbc_cksum): Return only the rightmost 32
-	bits; this should optimize out on any platform where longs are
-	exactly 32 bits wide.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-08-16  Tom Yu  <tlyu@mit.edu>
-
-	* string2key.c: Work around possible bug with AFS salts;
-	[krb5-clients/1146] from <Wolfgang.Friebel@cern.ch>.
-
-2002-06-07  Miro Jurisic  <meeroh@mit.edu>
-
-	* des_int.h: use "" includes for k5-int.h
-	[pullup from 1-2-2-branch]
-
-2001-10-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* afsstring2key.c, d3_cbc.c, des_int.h, f_cbc.c, f_cksum.c,
-	string2key.c: Don't explicitly declare pointers FAR any more.
-
-2001-06-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* string2key.c (mit_des_string_to_key_int): Undo last change.
-
-2001-06-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* destest.c (value): Now signed int, since some entries are
-	negative.
-	(convert): Do bounds checking on character values used as indices
-	into value array.
-
-	* string2key.c (mit_des_string_to_key_int): Now static.
-
-2001-06-21  Ezra Peisach  <epeisach@mit.edu>
-
-	* t_verify.c: Get rid of global variables i,j.
-
-2001-06-20  Ken Raeburn  <raeburn@mit.edu>
-
-	* string2key.c (mit_des_string_to_key_int): Construct a krb5_data
-	object with proper length for the AFS case (indicated by a -1 salt
-	length on input).
-
-2001-06-12  Ezra Peisach  <epeisach@mit.edu>
-
-	* destest.c: main returns int instead of void.  Add "const" to
-	casts in calls to mit_des_cbc_encrypt().
-
-	* t_verify.c (main): Add parenthesis aroud assignment in conditional. 
-
-2001-05-31  Ezra Peisach  <epeisach@mit.edu>
-
-	* f_cbc.c (mit_des_cbc_encrypt): Do not use a variable named "encrypt".
-	* d3_cbc.c (mit_des3_cbc_encrypt): Likewise.
-
-	* des_int.h (mit_des_cbc_encrypt, mit_des3_ecb_encrypt,
-	mit_des3_cbc_encrypt): Don't use "encrypt" as argument name.
-
-2001-04-12  Ezra Peisach  <epeisach@mit.edu>
-
-	* f_tables.h: Do not define const to nothing on platforms that
-	fail to define __STDC__ - let autoconf do this if necessary.
-
-2001-04-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* t_afss2k.c (do_it): Add cast to keep compiler quiet.
-
-	* f_cksum.c (mit_des_cbc_cksum): Use const for input, key
-	schedule, and initial vector.  Get rid of casts when possible.
-	* f_cbc.c (mit_des_cbc_encrypt): Likewise.
-	* f_sched.c (make_key_sched): Likewise.
-	* d3_cbc.c (mit_des3_cbc_encrypt): Likewise.
-	* d3_kysched.c (mit_des3_key_sched): Don't create new variables to
-	point to components of key and schedule, just index into the
-	argument variables.
-	* des_int.h (mit_des_cbc_cksum, mit_des_cbc_encrypt,
-	mit_des3_cbc_encrypt): Update decls.
-	(mit_des_string_to_key_int): New decl.
-
-	* weak_key.c (mit_des_is_weak_key): Get rid of some unneeded
-	casts.
-
-	* des_int.h (make_key_sched): Define a macro to rename with
-	mit_des_ prefix.
-
-	* des_int.h (des_cblock, des_key_schedule): Duplicate definitions
-	here and in kerberosIV/des.h, using macro
-	KRB5INT_DES_TYPES_DEFINED to avoid duplication.
-	(mit_des_cblock, mit_des_key_schedule): Define in terms of the
-	other types for now.
-	(PROTOTYPE): Don't define.
-
-	* afsstring2key.c, des_int.h, destest.c: Don't use PROTOTYPE macro.
-
-2001-01-25  Ken Raeburn  <raeburn@mit.edu>
-
-	* t_afss2k.c: Extend test cases to cover situation where krb5_data
-	refers to strings that are not nul-terminated.  Reorder functions
-	to avoid inlining, to keep debugging easier.
-	* afsstring2key.c (mit_afs_string_to_key): Don't depend on
-	nul-termination of input strings.
-
-2001-01-20  Ken Raeburn  <raeburn@mit.edu>
-
-	* afsstring2key.c (mit_afs_string_to_key): Allocate and pass
-	buffer for afs_crypt.  Don't use static storage for key schedule.
-	(IP, FP, PC1_C, PC1_D, shifts, PC2_C, PC2_D, E, e, P, S): Now
-	const.
-	(C, D, KS, L, R, tempL, f, preS): Static variables deleted.
-	(afs_crypt): Allocate them here, and pass pointers to other
-	routines.
-	(krb5_afs_crypt_setkey, krb5_afs_encrypt): Add extra arguments or
-	local variables for additional state, instead of static
-	variables.
-
-	* t_afss2k.c: New file.
-	* Makefile.in (t_afss2k): New target.
-	(TAFSS2KOBJS): New variable.
-	(check-unix): Run t_afss2k.
-	(clean): Get rid of t_afss2k binaries.
-
-2000-10-17  Ezra Peisach  <epeisach@mit.edu>
-
-	* des_int.h: Change prototypes for mit_des_cbc_encrypt(),
-	mit_des_cbc_cksum(), and mit_des3_cbc_encrypt() to take unsigned
-	long lengths.
-
-	* d3_cbc.c (mit_des3_cbc_encrypt): Length argument now takes an
-	unsigned long.
-
-	* f_cbc.c (mit_des_cbc_encrypt): Length argument now takes an
-	unsigned long.
-
-	* f_cksum.c (mit_des_cbc_cksum): Length argument now takes an
-	unsigned long.
-
-	* string2key.c: Unsigned/signed int cleanup. Test for a
-	salt-length of SALT_TYPE_AFS_LENGTH or -1 (for backwards
-	compatibilty) for use of mit_afs_string_to_key().
-
-2000-06-30  Ezra Peisach  <epeisach@mit.edu>
-
-	* afsstring2key.c: Initialization of S[8][64] - each 64 elements 
-	enclosed in brackets. 
-
-2000-06-28  Ezra Peisach  <epeisach@mit.edu>
-
-	* afsstring2key.c: "register x" -> "register int x".
-
-2000-02-25  Ezra Peisach  <epeisach@mit.edu>
-
-	* t_verify.c: Add "const" to casts in calls to mit_des_cbc_encrypt().
-
-	* destest.c: Declare zeroblock as krb5_octet * instead of char * as
-	argument to mit_des_cbc_encrypt.
-	
-2000-01-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* f_sched.c (PC2_C, PC2_D): Put braces around sub-arrays.
-	* f_tables.c (des_SP_table): Ditto.
-
-	* weak_key.c (weak): Now const.
-	(mit_des_is_weak_key): Adjust pointer type accordingly.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-Mon May 10 15:16:18 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
-Sun Jul 19 12:00:00 1998  Marc Horowitz <marc@mit.edu>
-
-	* *.c: replace the crypto layer.
-
-Wed Feb 18 16:06:23 1998  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in: Remove trailing slash from thisconfigdir.  Fix up
-	BUILDTOP for new conventions.
-
-Fri Feb 13 15:20:54 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in (thisconfigdir), configure.in: Point the
- 		configuration directory at our parent, and remove our
-		local configure.in
-
-Mon Feb  2 17:02:29 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile
-
-Thu Dec 25 20:57:53 1997  Tom Yu  <chaoself@mit.edu>
-
-	* init_rkey.c (mit_des_init_random_key): Punt the struct; use
-	explicit variables instead because we're no longer doing a
-	memcpy.  In addition, fill p_state->sequence.data a byte at a
-	time. [krb5-libs/492]
-
-Mon Oct 27 01:06:34 1997  Tom Yu  <tlyu@mit.edu>
-
-	* d3_cbc.c, des.h, des_int.h, f_cbc.c, f_cksum.c, f_ecb.c,
-	f_pcbc.c, f_sched.c, f_tables.c, f_tables.h: Change KRB_INT32 to
-	DES_INT32 to avoid temptation to misuse.
-
-	* d3_cbc.c, d3_ecb.c, f_cbc.c, f_cksum.c, f_ecb.c, f_parity.c,
- 	f_pcbc.c, f_sched.c, f_tables.c: Don't include des.h; it's broken
- 	in ways.  Use only des_int.h instead.
-
-Tue Oct 21 13:22:23 1997  Ezra Peisach  <epeisach@mit.edu>
-
-	* Makefile.in (RUN_SETUP): Set KRB5_CONFIG.
-
-Tue Oct 14 15:35:53 1997  Tom Yu  <tlyu@voltage-multiplier.mit.edu>
-
-	* des_int.h: Use better logic to find an appropriate type for
- 	KRB_INT32; also don't assume that a key schedule element is
-	exactly 64 bits wide... use instead 2 * KRB_INT32, since that is
-	what the code uses internally.
-
-	* des.h: Use better logic to find an appropriate type for
- 	KRB_INT32.
-
-Mon Oct  6 11:32:51 1997  Ezra Peisach  <epeisach@mit.edu>
-
-	* destest.c (main): Initialize context to 0 so it will not be
-	        treated as unset by purify.
-
-	* t_verify.c (main): Use krb5_free_context to release memory in use.
-
-
-Sat Feb 22 18:50:35 1997  Richard Basch  <basch@lehman.com>
-
-	* Makefile.in: Use some of the new library list build rules in
-		win-post.in
-
-Fri Feb  7 07:12:52 1997  Richard Basch  <basch@lehman.com>
-
-	* Makefile.in (all-unix, all-mac): Create shared directory
-		before trying to build the object files
-
-Thu Jan 30 21:43:19 1997  Richard Basch  <basch@lehman.com>
-
-	* cbc_cksum.c
-		Change functions to take const args where possible
-
-Thu Nov 21 00:58:04 EST 1996    Richard Basch   <basch@lehman.com>
-
-        * Makefile.in: Win32 build
-
-Sat Feb  8 18:49:39 1997  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in:
-	* configure.in: Update to new program build procedure.
-
-Sun Dec 29 21:53:49 1996  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in:
-	* configure.in: Update to use new library building procedure.
-
-Sat Jun 15 03:51:19 1996  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-	* Makefile.in (clean): Add space before \
-
-Wed Jun 12 00:08:31 1996  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* des_int.h: Add missing prototypes; needed to make Win-32
-		compiler happy.
-
-	* f_tables.h: Add #ifdef _WIN32 in places where we had #ifdef _MSDOS
-
-Tue May 21 19:30:10 1996  Sam Hartman  <hartmans@mit.edu>
-
-	* Makefile.in (check-unix): In building destest and verify, make
- 	sure we include enough object modules to deal with systems that do
- 	early binding in shared libs, so we porperly overide
- 	mit_des_is_weak_key
-
-	* Makefile.in (check-unix): Use $(RUN_SETUP) so shared lib paths
- 	are happy.
-
-Sat May 18 02:02:59 1996  Theodore Y. Ts'o  <tytso@mit.edu>
-
-	* u_nfold.c (mit_des_n_fold): Fix memory leak.  Free tempbuf
-		before returning.
-
-Tue May 14 18:59:38 1996  Richard Basch  <basch@lehman.com>
-
-	* des_int.h: the cs_entry routines in cbc_cksum.c are now static.
-
-	* Makefile.in: removed cs_entry.c
-
-	* cbc_cksum.c:
-		caller is responsible for allocating cksum->contents
-		  and indicate the allocated amount in cksum->length.
-		the cs_entry routines are now static and the cs_entry
-		  structure is now in this file to enforce proper use.
-
-Fri May 10 01:46:25 1996  Richard Basch  <basch@lehman.com>
-
-	* d3_str2ky.c d3_procky.c des_int.h init_rkey.c:
-	Replace des3-md5 with des3-sha
-
-Thu May  2 18:29:01 1996  Richard Basch  <basch@lehman.com>
-
-	* d3_rndky.c new_rn_key.c: Removed (obsolete).
-
-	* u_rn_key.c: New file
-		Support routines to set the seed/sequence number of the
-		random stream.
-
-	* Makefile.in: new/removed file changes
-
-	* des_int.h: Changed prototypes for all the random routines.
-
-	* fin_rndkey.c: rewrote mit_des_finish_random_key to use the new
-		random state structure and to accept an eblock as arg 1.
-
-	* init_rkey.c: rewritten to be a common DES, 3-DES random stream
-		initialization routine.  it uses the eblock to determine
-		the random key type to generate.
-		
-	* random_key.c: rewritten to be a common DES, 3-DES random stream
-		generator, using the former DES algorithm (encrypting an
-		incrementing sequence number with a unique key schedule)
-		[3-DES uses DES3-CBC-CRC to increment a 192 bit sequence
-		number, instead of being only as secure as DES.]
-
-Wed Apr 17 19:25:01 1996  Marc Horowitz  <marc@mit.edu>
-
-	* cbc_cksum.c (mit_des_cbc_checksum): don't allocate the checksum
-	contents.  The caller is supposed to do this.
-
-Wed Apr 10 17:46:40 1996  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in (SRCS,OBJS): Added afsstring2key.c to the list of
-		files to be compiled.
-
-Sat Mar 30 22:56:48 1996  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in (SRCS): Took the list of sources and object files in
-		FSRCS, FOBJS, D3OBJS, and D3SRCS, and inlined them into
-		the OBJS and SRCS list.  This is necessary so that the
-		files are correctly picked up for the Macintosh build.
-
-Thu Mar 28 10:49:31 1996  Richard Basch  <basch@lehman.com>
-
-	* init_rkey.c, d3_str2ky.c, d3_procky.c: Support ENCTYPE_DES3_CBC_RAW
-
-	* des_int.h: Support CKSUMTYPE_DES3_CBC_MD5
-
-Wed Mar 20 22:33:40 1996  Theodore Y. Ts'o  <tytso@dcl>
-
-	* u_nfold.c (mit_des_n_fold): 
-	* d3_str2ky.c (mit_des3_string_to_key): Fix Windows lint flames.
-
-Mon Mar 11 11:03:23 1996  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-	* new_rn_key.c (mit_des_generate_random_block): Add const keywrod
-		to cast for suncc warning.
-
-Thu Feb 22 20:32:08 1996  Theodore Y. Ts'o  <tytso@dcl>
-
-	* t_random.c: New file which just tests the random number generator.
-
-	* new_rn_key.c (mit_des_set_random_generator_seed): Add fix so
-		that we do something even if the input key is not a valid
-		DES key.
-
-Wed Jan 10 22:28:23 1996  Theodore Y. Ts'o  <tytso@dcl>
-
-	* des_int.h: Fix return type for mit_des3_string_to_key().
-
-Tue Nov 28 11:24:26 1995  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-	* f_ecb.c, des_int.h (mit_des_ecb_encrypt): Add const declaration
-		to input cblock.
-
-Thu Nov 09 17:05:57 1995  Chris Provenzano (proven@mit.edu)
-
-        * string2key.c : Remove krb5_enctype from krb5_string_to_key() args.
-	* string2key.c, des_int.h : Remove krb5_enctype from 
-		mit_des_string_to_key() args.
-
-Tue Oct 31 22:06:52 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* finish_key.c (mit_des_finish_key): Make mit_des_finish_key()
-		safe to call even if there is no key that needs to be
-		freed.
-
-Fri Oct  6 21:59:55 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in: Remove ##DOS!include of config/windows.in.
-		config/windows.in is now included by wconfig.
-
-Thu Sep 28 16:00:00 1995  John Rivlin  <jrivlin@fusion.com>
-
-	* Makefile.in: Renamed verify.c to t_verify.c to avoid conflict with 
-		lib/gssapi/krb5/verify.c on the Mac.
-
-Mon Sep 25 16:48:36 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in: Removed "foo:: foo-$(WHAT)" lines from the
-		Makefile. 
-
-Fri Sep 22 23:32:58 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* des_int.h: Define PROTOTYPE if it is not defined elsewhere.
-
-Tue Sep 12 18:50:50 1995   John Rivlin (jrivlin@fusion.com)
-
-	* f_pcbc.c: Added include of des_int.h which seemed to
-		get lost so that mit_des_xxx get defined.
-
-Wed Sep 06 14:20:57 1995   Chris Provenzano (proven@mit.edu)
-
-        * des_int.h, destest.c, init_rkey.c, random_key.c, string2key.c 
-	* verify.c : s/keytype/enctype/g, s/KEYTYPE/ENCTYPE/g
-
-Tue Sep 05 22:10:34 1995   Chris Provenzano (proven@mit.edu)
-
-        * destest.c, random_key.c, string2key.c, verify.c : Remove krb5_enctype
-		references, and replace with krb5_keytype where appropriate.
-	* init_rkey.c (mit_des_init_random_key()), 
-	* string2key.c (mit_des_string_to_key()) : Allow for any DES keytype.
-
-
-Tue Aug 29 13:29:19 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* process_key.c, finish_key.c - Set and use priv_size in the krb5_
-		encrypt_block.
-
-Thu Aug 24 18:08:42 1995  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-        * f_cksum.c: Change code to match prototypes. 
-
-	* f_cbc.c, f_ecb, f_parity, f_pcbc: Change des_cblock to
-		mit_des_cblock and  des_key_schedule to
-		mit_des_key_schedule. Also include des_int.h.
-
-	* destest.c: Change des_cblock to mit_des_cblock and add local
-		prototypes. 
-
-	* cs_entry.c: Remove prototypes for mit_des_cbc_cksum and
-		mit_des_cbc_cksum. Now in des_int.h.
-
-	* cbc_cksum.c, string2key.c:	Remove casts in call to
-		mit_des_cbc_cksum 
-
-	* des_int.h: Add prototype for mit_des_cbc_verf_cksum. Change 
-		return code for mit_des_cbc_cksum to match source.
-
-	* des.h: Remove unused structures and defines.
-
-Thu Jul 27 15:18:37 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* des_int.h - Inline the old contents of include/krb5/mit-des.h.  This
-		is now the only place that it's needed.  Also update the
-		prototype for mit_des_ecb_encrypt.
-	* destest.c, f_sched.c, fin_rndkey.c, finish_key.c - Include des_int.h
-	* destest.c, new_rn_key.c, verify.c - Cast to the correct type for
-		mit_des_ecb_encrypt.
-
-
-Fri Jul 7 16:12:29 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* cbc_cksum.c - Add checksum verifier procedure.
-	* cs_entry.c - Add entry for checksum verifier.
-
-Thu Jul  6 17:16:17 1995  Tom Yu  <tlyu@lothlorien.MIT.EDU>
-
-	* new_rn_key.c (mit_des_init_random_number_generator): don't call
-		us_timeofday with context arg; also update for new
-		function names (krb5_crypto_*).
-
-Fri Jun  9 19:18:29 1995    <tytso@rsx-11.mit.edu>
-
-	* configure.in: Remove standardized set of autoconf macros, which
-		are now handled by CONFIG_RULES.
-
-Thu May 25 22:16:02 1995  Theodore Y. Ts'o  (tytso@dcl)
-
-	* configure.in, Makefile.in: Add support for shared libraries.
-
-Fri May 12 02:46:13 1995  Mark Eichin  <eichin@cygnus.com>
-
-	* key_sched.c (mit_des_key_sched): *always* fill in the schedule,
-	regardless of the key failing other tests, as a defense against
-	telnet-style bugs.
-
-Thu Apr 13 15:49:16 1995 Keith Vetter (keithv@fusion.com)
-
-	* *.[ch]: removed unneeded INTERFACE from non-api functions.
-        * *.h added FAR to pointers visible at to the world.
-        * f_tables.h: __STDC__ condition also checks _WINDOWS
-
-Tue Mar 28 15:09:43 1995  John Gilmore  (gnu at toad.com)
-
-	Bring in portability fixes from Cygnus K4 release.
-
-	* f_cbc.c, f_cksum.c, f_pcbc.c:  Replace individual casts with
-	simpler solution.
-	* f_tables.h:  Insert debugging code, and circumvention for MPW
-	compiler bug.
-	* key_sched.c:  Remove ancient (microvax??!) comments, and dup 
-	prototype.
-	* verify.c:  Small hack for MS-Windows scrolling.  Fix spelling.
-	"register x" -> "register int x".
-
-Thu Mar 16 21:16:24 1995  John Gilmore  (gnu at toad.com)
-
-	* Makefile.in (LDFLAGS):  Remove, conflicts with pre.in.
-	(clean):  Insert FIXME.
-	(verify$(EXEEXT), destest$(EXEEXT)):  Make them work on Mac.
-	(check-mac):  Add, identical to Unix.
-	(clean):  Use $(EXEEXT).
-	* des_int.h (mit_des_cbc_cksum):  Fix prototype from void to long,
-	to match the actual function.
-
-Tue Mar 14 17:28:35 1995 Keith Vetter (keithv@fusion.com)
-
-	* f_cbc.c, f_cksum.c, f_pcbc.c: added casts so that chars get promoted
-           to longs instead of ints when doing 32 bit bit manipulations.
-
-Thu Mar 2 17:50:39 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: changed LIBNAME for the PC.
-        * f_tables.h. f_cbc.c: added cast on the assignment of bits of
-           a long into characters.
-        * string2k.c: promoted an int into a long.
-
-Thu Mar  2 18:09:28 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in (ISODELIB): Remove reference to $(ISODELIB).
-
-Wed Mar  1 16:30:50 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* configure.in: Remove ISODE_INCLUDE, replace check for -lsocket
-		and -lnsl with WITH_NETLIB check.
-
-Tue Feb 28 00:18:38 1995  John Gilmore  (gnu at toad.com)
-
-	* des_int.h:  Avoid <krb5/...> includes.
-
-Mon Feb 20 16:10:29 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: made to work under windows PC
-        * cbc_cksu.c cs_entry.c finish_k.c fin_rndk.c f_cbc.c f_cksum.c 
-          f_ecb.c f_parity.c f_pcbc.c f_sched.c init_rke.c key_sche.c 
-          new_rn_k.c process_.c random_k.c string2k.c weak_key.c: added
-          windows INTERFACE keyword.
-        * string2key.c: needed long -> int casts for memset and malloc
-
-Wed Feb  8 13:59:05 1995  Theodore Y. Ts'o  (tytso@dcl)
-
-	* des.h: Add KRB5_INT32 definitions for non-32 int platforms.
-
-Fri Feb  3 06:33:22 1995  Theodore Y. Ts'o  (tytso@dcl)
-
-	* des_int.h: Remove unused cruft from the file.
-
-	* verify.c: Fix typo; "%02 X" --> "%02X"
-
-Wed Jan 25 20:04:39 1995  John Gilmore  (gnu at toad.com)
-
-	* cbc_cksum.c, cs_entry.c, des.h, destest.c, f_sched.c,
-	fin_rndkey.c, finish_key.c, init_rkey.c, key_sched.c,
-	new_rn_key.c, process_ky.c, random_key.c, string2key.c, verify.c,
-	weak_key.c: Replace <.../...> includes with "..."s.
-
-Wed Jan 25 16:54:40 1995  Chris Provenzano (proven@mit.edu)
-
-        * Removed all narrow types and references to wide.h and narrow.h
-
-Fri Nov 18 16:20:10 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* destest.c (main): Add magic numbers to keyblock structure.
-
-Tue Nov  8 17:57:47 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* des_int.h:
-	  random_key.c (mit_des_random_key):
-	  string2key.c (mit_des_string_to_key): Change
-		internal calling signature to pass in the encryption
-		block, so that the encryption type in the keyblock
-		structure can be properly initialized.
-
-Thu Nov  3 18:31:55 1994  Mark Eichin  (eichin@cygnus.com)
-
-	* Makefile.in: stop building f_pcbc.c, since it belongs in
-	libdes425, but leave it here for reference.
-
-Fri Oct 14 00:33:17 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* des_int.h, f_cbc.c, verify.c: Fix function declarations to
-		(slightly) better match the conventions used by the krb5
-		source tree.
-
-	* cs_entry.c: Remove declarations of the cryptosystem specific
-		structures to raw-des.c and des-crc.c in the parent
-		directory.  They're strictly speaking not DES specific.
-
-	* Makefile.in: Remove file krb_glue.c; we don't use it any more.
-
-Thu Oct  6 12:49:29 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* Makefile.in: Make sure the "make check" programs get cleaned up
-		on a "make clean".
-
-	* verify.c (main): Take out check that assures that long is 4
-		bytes.  The DES implementation shouldn't be depending on
-		this, and if it is, then that's what the verify program
-		should be discovering, yes?
-
-Thu Jun 23 01:09:33 1994  Tom Yu  (tlyu at dragons-lair)
-
-	* cs_entry.c: oops typo in that last one
-
-	* grrr.... ETYPE_DES_CBC_CRC really should be ETYPE_RAW_DES_CBC,
-	although something like ETYPE_DES_CBC_RAW or ETYPE_DES_CBC_NONE
-	would probably work better (following the convention
-	ETYPE_{system}_{mode}_{integrity})
-
diff --git a/src/lib/crypto/dk/ChangeLog b/src/lib/crypto/dk/ChangeLog
deleted file mode 100644
index 570658035c..0000000000
--- a/src/lib/crypto/dk/ChangeLog
+++ /dev/null
@@ -1,185 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2005-05-19  Sam Hartman  <hartmans@mit.edu>
-
-	* dk_prf.c (krb5int_dk_prf):  Use k5crypto versions of keyblock memory management
-
-2004-12-09  Sam Hartman  <hartmans@mit.edu>
-
-	* dk.h: Add krb5_dk_prf
-
-	* Makefile.in (SRCS): Add dk_prf.c
-
-	* dk_prf.c (krb5int_dk_prf): New function
-
-2004-03-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* derive.c (krb5_random2key): Don't compile.
-
-	* dk.h (krb5_derive_random): Declare.
-
-2004-02-24  Sam Hartman  <hartmans@avalanche-breakdown.mit.edu>
-
-	* dk.h: As below.
-
-	* checksum.c dk_decrypt.c dk_encrypt.c: Remove ENCTYPE_LOCAL_DES3_HMAC_SHA1
-
-2004-02-18  Ken Raeburn  <raeburn@mit.edu>
-
-	* checksum.c, derive.c, dk_decrypt.c, dk_encrypt.c: Use ANSI C
-	style function definitions.
-
-2004-02-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac): New argument
-	IVEC_MODE.  If clear, same old behavior.  If set, copy out next
-	to last block for CTS.
-	(krb5_dk_decrypt, krb5int_aes_dk_decrypt): Pass extra argument.
-	* dk_encrypt.c (krb5int_aes_dk_encrypt): For IV, copy out next to
-	last block for CTS.
-
-2003-07-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* checksum.c (krb5_dk_make_checksum, krb5_marc_dk_make_checksum):
-	Use new numeric fields for key/bolck sizes instead of calling
-	functions.
-	* derive.c (krb5_derive_key, krb5_derive_random): Likewise.
-	* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac,
-	krb5_marc_dk_decrypt): Likewise.
-	* dk_encrypt.c (krb5_dk_encrypt_length, krb5_dk_encrypt,
-	krb5int_aes_encrypt_length, trunc_hmac, krb5int_aes_dk_encrypt,
-	krb5_marc_dk_encrypt_length, krb5_mark_dk_encrypt): Likewise.
-	* stringtokey.c (krb5int_dk_string_to_key): Likewise.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-04-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* dk_encrypt.c (krb5int_aes_dk_encrypt): Set output length
-	properly.
-
-2003-04-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac): Renamed from
-	krb5_dk_decrypt, made static, added extra HMACSIZE argument to
-	indicate size of HMAC.  Cast byte values to char to silence
-	compiler warning.
-	(krb5_dk_decrypt): Call it.
-	(krb5int_aes_dk_decrypt): New function.
-	* dk_encrypt.c (krb5_dk_encrypt): Cast byte values to char to
-	silence compiler warning.
-	(krb5int_aes_encrypt_length, trunc_hmac, krb5int_aes_dk_encrypt):
-	New functions.
-	* dk.h (krb5int_aes_encrypt_length, krb5int_aes_dk_encrypt,
-	krb5int_aes_dk_decrypt): Declare.
-
-2003-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* stringtokey.c (krb5int_dk_string_to_key): Renamed from
-	krb5_... and added s2k-params argument.
-	* dk.h: Updated.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2001-10-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* dk.h: Make prototypes unconditional.
-
-2001-06-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* derive.c: Include etypes.h.
-	(krb5_derive_random, krb5_random2key): New functions.
-
-	* checksum.c (krb5_dk_make_checksum): Cast 0x99 to char explicitly
-	to silence warnings.
-
-2001-04-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* checksum.c (krb5_dk_make_checksum): Add casts when mixing
-	pointers with different target signedness.
-	* dk_decrypt.c (krb5_dk_decrypt): Likewise.
-	* stringtokey.c (krb5_dk_string_to_key): Likewise.
-
-2001-03-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* checksum.c, derive.c, dk.h, dk_decrypt.c, dk_encrypt.c,
-	stringtokey.c: Use const instead of krb5_const.
-
-2001-01-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* stringtokey.c (kerberos): Now const.
-	(krb5_dk_string_to_key): Cast it to non-const.
-
-2000-06-03  Tom Yu  <tlyu@mit.edu>
-
-	* dk_encrypt.c (krb5_dk_encrypt, krb5_marc_dk_encrypt): Chain
-	ivecs.
-	
-	* dk_decrypt.c (krb5_dk_decrypt, krb5_marc_dk_decrypt): Chain
-	ivecs.
-
-2000-04-28  Ken Raeburn  <raeburn@mit.edu>
-
-	* derive.c (krb5_derive_key): If memory allocation fails, release
-	other allocated blocks before returning, instead of trying to
-	release them after returning.
-
-2000-01-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* checksum.c (krb5_dk_make_checksum): enc_providers are now
-	const.  Modify if(a=b) assignment/test constructs to silence gcc
-	warnings.
-	* dk_decrypt.c (krb5_dk_decrypt, krb5_marc_dk_decrypt): Ditto.
-	* dk_encrypt.c (krb5_dk_encrypt, krb5_marc_dk_encrypt): Ditto.
-	* stringtokey.c (krb5_dk_string_to_key): Ditto.  Include dk.h.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-1999-06-28  Tom Yu  <tlyu@mit.edu>
-
-	* dk_encrypt.c (krb5_marc_dk_encrypt): Call
-	krb5_marc_dk_encrypt_length() instead of krb5_dk_encrypt_length()
-	to prevent blocksize errors.
-
-Mon May 10 15:16:34 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-Tue Jan  5 00:09:13 1999  Tom Yu  <tlyu@mit.edu>
-
-	* dk.h: Add prototypes for krb5_marc_dk_*.
-
-	* dk_encrypt.c (krb5_marc_dk_encrypt): Add compat for 32-bit
-	length coded ciphertext.
-
-	* dk_decrypt.c (krb5_marc_dk_decrypt): Add compat for 32-bit
-	length coded ciphertext.
-
-	* checksum.c: Add compat for 32-bit length included checksum.
-	Note that nothing uses this at the moment, and probably
-	shouldn't.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
diff --git a/src/lib/crypto/enc_provider/ChangeLog b/src/lib/crypto/enc_provider/ChangeLog
deleted file mode 100644
index b79611f438..0000000000
--- a/src/lib/crypto/enc_provider/ChangeLog
+++ /dev/null
@@ -1,153 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2005-07-02  Ken Raeburn  <raeburn@mit.edu>
-
-	* rc4.c: Renamed from arcfour.c.
-	* Makefile.in (STLIBOBJS, OBJS, SRCS): Updated accordingly.
-
-2004-05-25  Ezra Peisach  <epeisach@mit.edu>
-
-	* aes.c (krb5int_aes_encrypt): Signed/unsigned warning fix. 
-
-2004-02-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* aes.c (krb5int_aes_encrypt, krb5int_aes_decrypt): Copy out value
-	for new IV.
-
-2003-12-19  Ken Raeburn  <raeburn@mit.edu>
-
-	* arcfour.c (arcfour_weakkey1, arcfour_weakkey2,
-	arcfour_weakkeys): Now const.
-
-	* des.c (mit_des_zeroblock): Don't define here.
-	* des3.c (mit_des_zeroblock): Don't define here.
-
-2003-07-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* aes.c (aes_block_size, aes128_keysize, aes256_keysize):
-	Deleted.
-	(krb5int_enc_aes128, krb5int_enc_aes256): Updated.
-	* arcfour.c (k5_arcfour_blocksize, k5_arcfour_keysize): Deleted.
-	(krb5int_enc_arcfour): Updated.
-	* des.c (k5_des_block_size, k5_des_keysize): Deleted.
-	(krb5int_enc_des): Updated.
-	* des3.c (k5_des3_block_size, k5_des3_keysize): Deleted.
-	(krb5int_enc_des3): Updated.
-
-	* des3.c (validate_and_schedule): Split out from old
-	k5_des3_docrypt.
-	(k5_des3_encrypt, k5_des3_decrypt): Call it, and
-	krb5int_des3_cbc_encrypt or _decrypt, instead of
-	k5_des3_docrypt.  Zap key schedules before returning.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-04-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* aes.c (enc): Replaced function with a macro.
-	(dec): New macro.
-	(krb5int_aes_encrypt): Use enc and dec.  Delete unused variable
-	OFFSET.
-	(krb5int_aes_decrypt): Renamed from k5_aes_dencrypt, implemented
-	decryption, made non-static.
-	(krb5int_enc_aes128, krb5int_enc_aes256): Use new name for
-	krb5int_aes_decrypt.
-
-2003-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* aes.c (krb5int_aes_init_state): Implement.
-	* enc_provider.h (krb5int_enc_aes128, krb5int_enc_aes256):
-	Declare.
-
-2003-02-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* aes.c: New file.
-	* Makefile.in (STLIBOBJS, OBJS, SRCS): Include it.
-	(LOCALINCLUDE): Add aes source dir.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-02-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* arcfour.c: Use const instead of krb5_const.
-
-2001-11-06  Sam Hartman  <hartmans@mit.edu>
-
-	* arcfour.c (k5_arcfour_docrypt): Treat state as an
-	ArcFourCipherState structure; manipulate and initialize as appropriate.
-	(k5_arcfour_init_state): new function
-
-	* arcfour.c des.c des3.c:  Add state functions
-
-2001-10-23  Sam Hartman  <hartmans@mit.edu>
-
-	* arcfour.c (endif /* gcc inlines*/): handle inlines in an ansi-compatible manner
-
-	* enc_provider.h: New encryption provider: rc4
-
-2001-10-19  Sam Hartman  <hartmans@mit.edu>
-
-	* arcfour.c: Move prototype for static functions here  rather than in a header file.
-
-2001-05-31  Ezra Peisach  <epeisach@mit.edu>
-
-	* des.c (k5_des_docrypt): Do not use a variable named "encrypt"
-	* des3.c (k5_des3_docrypt): Likewise.
-
-2001-04-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* des.c (k5_des_docrypt): Add casts when mixing pointer types with
-	different target signedness.
-	* des3.c (k5_des3_docrypt): Likewise.
-
-2001-03-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* des.c, des3.c, enc_provider.h: Use krb5int_ prefix for internal
-	"provider" structures.
-
-2001-03-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* des.c, des3.c: Use const instead of krb5_const.
-
-2000-06-28  Ezra Peisach  <epeisach@mit.edu>
-
-	* des.c, des3.c: Remove unused variables.
-
-2000-01-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* des.c (mit_des_zeroblock): Now const, and using C default
-	initialization.
-	(krb5_enc_des): Now const.
-	* des3.c (mit_des_zeroblock, krb5_enc_des3): Similar.
-	* enc_provider.h (krb5_enc_des, krb5_enc_des3): Update decls.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-Mon May 10 15:16:54 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
diff --git a/src/lib/crypto/hash_provider/ChangeLog b/src/lib/crypto/hash_provider/ChangeLog
deleted file mode 100644
index f09c84cebe..0000000000
--- a/src/lib/crypto/hash_provider/ChangeLog
+++ /dev/null
@@ -1,77 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2003-07-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* hash_crc32.c (k5_crc32_hash_size, k5_crc32_block_size):
-	Deleted.
-	(krb5int_hash_crc32): Updated.
-	* hash_md4.c (k5_md4_hash_size, k5_md4_block_size): Deleted.
-	(krb5int_hash_md4): Updated.
-	* hash_md5.c (k5_md5_hash_size, k5_md5_block_size): Deleted.
-	(krb5int_hash_md5): Updated.
-	* hash_sha1.c (k5_sha1_hash_size, k5_sha1_block_size): Deleted.
-	(krb5int_hash_sha1): Updated.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2001-04-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* hash_md4.c (k5_md4_hash): Cast argument to krb5_MD4Update.
-	* hash_md5.c (k5_md5_hash): Cast argument to krb5_MD5Update.
-
-2001-03-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* hash_crc32.c, hash_md4.c, hash_md5.c, hash_provider.h,
-	hash_sha1.c: Use krb5int_ prefix for internal "provider"
-	structures.
-
-2001-03-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* hash_crc32.c, hash_md4.c, hash_md5.c, hash_sha1.c: Use const
-	instead of krb5_const.
-
-2000-10-17  Ezra Peisach  <epeisach@mit.edu>
-
-	* hash_sha1.c (k5_sha1_hash): Cast length field in shsUpdate call
-	to int.
-
-2000-01-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* hash_crc32.c (krb5_hash_crc32): Now const.
-	* hash_md4.c (krb5_hash_md4): Now const.
-	* hash_md5.c (krb5_hash_md5): Now const.
-	* hash_sha1.c (krb5_hash_sha1): Now const.
-	* hash_provider.h: Updated decls.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-Mon May 10 15:19:03 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
diff --git a/src/lib/crypto/keyhash_provider/ChangeLog b/src/lib/crypto/keyhash_provider/ChangeLog
deleted file mode 100644
index e5d74330ed..0000000000
--- a/src/lib/crypto/keyhash_provider/ChangeLog
+++ /dev/null
@@ -1,152 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2004-05-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (t_cksum4, t_cksum5): Link test programs against
-	thread support library.
-
-2003-12-19  Ken Raeburn  <raeburn@mit.edu>
-
-	* descbc.c (mit_des_zeroblock): Don't define here.
-	* k5_md4des.c (mit_des_zeroblock): Don't define here.
-	* k5_md5des.c (mit_des_zeroblock): Don't define here.
-
-2003-07-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* descbc.c (k5_descbc_hash_size): Deleted.
-	(krb5int_keyhash_descbc): Updated.
-	* hmac_md5.c (k5_hmac_md5_hash_size): Deleted.
-	(krb5int_keyhash_hmac_md5): Updated.
-	* k5_md4des.c (k5_md4des_hash_size): Deleted.
-	(krb5int_keyhash_md4des): Updated.
-	* k5_md5des.c (k5_md5des_hash_size): Deleted.
-	(krb5int_keyhash_md5des): Updated.
-	* t_cksum.c (main): Use the hashsize field instead of calling a
-	function.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-12-23  Ezra Peisach  <epeisach@bu.edu>
-
-	* t_cksum.c: Cleanup (potential) variable used before set warning.
-
-2002-10-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (t_cksum4, t_cksum5): Include com_err library when
-	linking.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2001-12-14  Ezra Peisach  <epeisach@mit.edu>
-
-	* hmac_md5.c (k5_hmac_md5_hash): Test if malloc returns NULL and
-	not the argument to malloc.
-
-2001-12-05  Ezra Peisach  <epeisach@mit.edu>
-
-	* t_cksum.c (main): Free memory leak in tests.
-
-2001-10-28  Jeff Altman <jaltman@columbia.edu>
-
-        * Makefile.in - added dependency info for hmac_md5.c
-          Fixed typo $(OUTP)hmac_md5.c -> $(OUTPRE)hmac_md5.c which prevented
-          builds on Windows.
-
-2001-10-23  Sam Hartman  <hartmans@mit.edu>
-
-	* t_cksum.c (main): Include usage argument to verify
-
-	* k5_md5des.c (k5_md5des_verify): Add usage
-
-	* k5_md4des.c (k5_md4des_verify): Add usage
-
-2001-10-22  Sam Hartman  <hartmans@mit.edu>
-
-	* keyhash_provider.h hmac_md5.c:  Implement Microsoft hmac-md5 keyhash provider
-
-	* t_cksum.c (main):  Include key usage in hash call.
-
-	* k5_md5des.c (k5_md5des_hash): add usage
-
-	* k5_md4des.c (k5_md4des_hash):  add key usage
-
-	* descbc.c (k5_descbc_hash):  Add key usage
-
-2001-05-31  Ezra Peisach  <epeisach@mit.edu>
-
-	* k5_md4des.c (k5_md4des_verify): Get rid of local variable that
-	is assigned to, without side effects, but never used.
-	* k5_md5des.c (k5_md5des_verify): Likewise.
-
-2001-03-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* descbc.c, k5_md4des.c, k5_md5des.c, keyhash_provider.h,
-	t_cksum.c: Use krb5int_ prefix for internal "provider"
-	structures.
-
-2001-03-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* descbc.c, k5_md4des.c, k5_md5des.c: Use const instead of
-	krb5_const.
-
-2000-09-25  Ezra Peisach  <epeisach@mit.edu>
-
-	* descbc.c, k5_md4des.c, k5_md5des.c, t_cksum.c: Cleanup unsigned
-	vs. signed warnings.
-
-	* Makefile.in (t_cksum5, t_cksum4): Executables do not need to
-	link with the krb5 library.
-
-2000-06-28  Ezra Peisach  <epeisach@mit.edu>
-
-	* descbc.c (k5_descbc_hash): Get rid of unused variable.
-
-2000-01-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* descbc.c (mit_des_zeroblock): Now const, and using C default
-	initializer.
-	(krb5_keyhash_descbc): Now const.
-	* k5_md4des.c (mit_des_zeroblock): Now const, and using C default
-	initializer.
-	(k5_md4des_hash): Change if(a=b) constructs to silence gcc
-	warnings.
-	(k5_md4des_verify): Delete unused variable.
-	(krb5_keyhash_md4des): Now const.
-	* k5_md5des.c (mit_des_zeroblock): Now const, and using C default
-	initializer.
-	(k5_md5des_hash): Change if(a=b) constructs to silence gcc
-	warnings.
-	(k5_md5des_verify): Delete unused variable.
-	(krb5_keyhash_md5des): Now const.
-	* keyhash_provider.h: Updated krb5_keyhash_* decls.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-Mon May 10 15:19:24 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
diff --git a/src/lib/crypto/md4/ChangeLog b/src/lib/crypto/md4/ChangeLog
deleted file mode 100644
index 7fc3b00de4..0000000000
--- a/src/lib/crypto/md4/ChangeLog
+++ /dev/null
@@ -1,315 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2006-01-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (t_mddriver): Include support library.  Use
-	CC_LINK.
-
-2005-05-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* md4.c (Transform) [CONFIG_SMALL]: Roll loops for each round.
-
-2004-02-18  Ken Raeburn  <raeburn@mit.edu>
-
-	* md4.c: Use ANSI C style function definitions.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* rsa-md4.h (rsa_md4_cksumtable_entry,
-	rsa_md4_des_cksumtable_entry): Delete unused declarations.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2001-10-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* md4.c, rsa-md4.h: Don't explicitly declare pointers FAR any
-	more.
-
-2001-03-14  Ken Raeburn  <raeburn@mit.edu>
-
-	* md4.c (GG, HH, krb5_MD4Init): Use UL suffix on numbers, don't
-	bother with UL macro.
-	(UL): Macro deleted.
-	(Transform): Always declare with prototype.
-
-	* rsa-md4.h: Always use prototypes.
-
-2000-01-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* md4.c (PADDING): Now const.
-	(krb5_MD4Update): Argument inBuf now points to const.
-	(ROTATE_LEFT): Change (a&b|c) construct to silence gcc warning.
-	* rsa-md4.h (krb5_MD4Update): Update decl.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-Mon May 10 15:19:48 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
-Fri Nov  6 10:29:34 1998  Ezra Peisach  <epeisach@mit.edu>
-
-	* Makefile.in: Fix for make check to work out of source tree.
-
-Sun Jul 19 12:00:00 1998  Marc Horowitz <marc@mit.edu>
-
-	* *.c: replace the crypto layer.
-
-Tue Mar  3 08:39:47 1998  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-	* Makefile.in (t_cksum): Do not depend on libkrb5.a, use 
-	KRB5_BASE_DEPLIBS.
-
-Wed Feb 18 16:06:57 1998  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in: Remove trailing slash from thisconfigdir.  Fix up
-	BUILDTOP for new conventions.
-
-Fri Feb 13 15:20:54 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in (thisconfigdir), configure.in: Point the
- 		configuration directory at our parent, and remove our
-		local configure.in
-
-Mon Feb  2 17:02:29 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile
-
-Tue Oct 28 16:36:15 1997  Tom Yu  <tlyu@voltage-multiplier.mit.edu>
-
-	* md4.c: Fix to deal with types longer than 32 bits.
-
-Sat Feb 22 18:53:00 1997  Richard Basch  <basch@lehman.com>
-
-	* Makefile.in: Use some of the new library list build rules in
-		win-post.in
-
-Thu Feb  6 12:46:49 1997  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-	* Makefile.in (t_cksum): Link with libkrb5.a.
-
-Thu Jan 30 21:42:03 1997  Richard Basch  <basch@lehman.com>
-
-	* md4crypto.c md4glue.c:
-		Change functions to take const args where possible
-
-Thu Nov 21 00:58:04 EST 1996    Richard Basch   <basch@lehman.com>
-
-        * Makefile.in: Win32 build
-
-Sun Dec 29 21:54:09 1996  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in:
-	* configure.in: Update to use new library building procedure.
-
-Wed Jun 12 00:10:42 1996  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* md4.c
-	* rsa-md4.h: Add #ifdef _WIN32 in places where we had #ifdef _MSDOS
-	
-
-Thu May 23 19:24:33 1996  Sam Hartman  <hartmans@mit.edu>
-
-	* Makefile.in (RUN_SETUP):  use KRB5_RUN_FLAGS
-
-Tue May 21 22:33:12 1996  Richard Basch  <basch@lehman.com>
-
-	* md4crypto.c: Incorrrect size arguments were being passed causing
-	decrypt integrity failures with the "fixed" md4 algorithm.  The old
-	path was also fixed to better reflect the appropriate size variables
-	even though the two in use were identical (if someone copied the
-	code to make a new crypto system, they may spend a long time
-	debugging because of the misuse of variables).
-	[Tracked down by epeisach; audited by basch.]
-
-Mon May 20 17:16:47 1996  Theodore Y. Ts'o  <tytso@mit.edu>
-
-	* md4crypto.c, md4crypto.h: Change use of RSA_MD4_DES_CKSUM_LENGTH
- 		to use OLD_RSA_MD4_DES_CKSUM_LENGTH and
- 		NEW_RSA_MD4_DES_CKSUM_LENGTH, as appropriate.
-
-Sat May 18 01:49:33 1996  Theodore Y. Ts'o  <tytso@mit.edu>
-
-	* md4crypto.c: Define MD4_K5BETA_COMPAT and MD4_K5BETA_COMP_DEF so
- 		that we continue doing things the wrong (broken) way.  All
- 		hail backwards compatibility....  The code now generates
- 		the old checksum, but it will verify both the old and the
- 		correct checksum formats.
-
-		Also fixed two bugs in the "correct" MD4_CRYPTO
-		implementation; use a zero initialization vector, and
-		calculate the confounder at the beginning of the message,
-		not at the end.  
-
-Tue May 14 19:31:58 1996  Richard Basch  <basch@lehman.com>
-
-	* md4crypto.c md4glue.c:
-		ensure the cksum content length is sufficient
-
-Fri Apr 12 21:38:33 1996  Richard Basch  <basch@lehman.com>
-
-	* md4driver.c md4glue.c md4.c rsa-md4.h md4crypto.c:
-	Renamed the functions to be preceded with krb5_
-
-Fri Oct  6 22:00:15 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in: Remove ##DOS!include of config/windows.in.
-		config/windows.in is now included by wconfig.
-
-Mon Sep 25 16:48:57 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in: Removed "foo:: foo-$(WHAT)" lines from the
-		Makefile. 
-
-Wed Sep 13 10:30:58 1995 Keith Vetter (keithv@fusion.com)
-
-	* md4crypt.c: put function prototype back in, fixed signed/unsigned
-		mismatch and removed unused variables.
-	* md4glue.c: put function prototypes back in.
-
-Wed Sep 06 14:20:57 1995   Chris Provenzano (proven@mit.edu)
-
-        * md4crypto.c : s/keytype/enctype/g, s/KEYTYPE/ENCTYPE/g
-
-Tue Sep 05 22:10:34 1995   Chris Provenzano (proven@mit.edu)
-
-        * md4crypto.c : Replace KEYTYPE_DES_CBC_MD4 for KEYTYPE_DES.
-
-Thu Jul 27 15:22:17 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* rsa-md4.h - Don't include k5-config.h.  No longer present or needed.
-
-
-Fri Jul 7 16:13:28 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* Makefile.in - Add t_cksum under unix only.
-	* configure.in - Define MD4_K5BETA_COMPAT to select compatability for
-		md4crypto.c.
-	* md4crypto.c - Correct implementation of RSA-MD4-DES checksums.  Add
-		ability to understand previous implementation and ability to
-		generate these checksums when forced to.
-		- Also add verification procedure for these checksums.
-	* md4glue.c - Add verifier procedure.
-	* rsa-md4.h - Add RSA_MD4_DES_CONFOUND_LENGTH, the length of the
-		RSA-MD4-DES confounder per RFC1510.
-
-
-Tue Jun 27 15:53:02 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* md4.c(Transform) - Add 'register' to scratch variable names.  Helps
-		out compiler so that DEC native compilers can now optimize
-		this module within our lifetimes.
-
-Thu Jun 22 16:13:29 1995  Tom Yu  (tlyu@dragons-lair)
-
-	* md4.c: reverse sense of KRB5_PROVIDE_PROTOTYPES
-
-Wed Jun 21 10:52:07 1995    <tytso@rsx-11.mit.edu>
-
-	* md4crypto.c, md4glue.c: Change PROTOTYPE -> KRB5_PROTOTYPE
-
-Fri Jun  9 19:18:17 1995    <tytso@rsx-11.mit.edu>
-
-	* md4crypto.c: Fix -Wall nits
-
-	* configure.in: Remove standardized set of autoconf macros, which
-		are now handled by CONFIG_RULES.
-
-Thu May 25 22:16:14 1995  Theodore Y. Ts'o  (tytso@dcl)
-
-	* configure.in, Makefile.in: Add support for shared libraries.
-
-Thu Apr 20 11:39:15 1995    <tytso@rsx-11.mit.edu>
-
-	* rsa-md4.h: removed unneeded #include of wordsize.h
-
-Thu Apr 13 15:49:16 1995 Keith Vetter (keithv@fusion.com)
-
-	* *.[ch]: removed unneeded INTERFACE from non-api functions.
-        * *.h added FAR to pointers visible at to the world.
-        * rsa-md4.h: __STDC__ condition also checks _WINDOWS
-
-Thu Mar 16 21:19:55 1995  John Gilmore  (gnu at toad.com)
-
-	* Makefile.in (CFLAGS):  Tweak for Unix->MPW converter.
-	(LDFLAGS):  Remove, conflicts with pre.in.
-	(all):  Remove all-$(WHAT) stuff, generalize for all platforms.
-	(t_mddriver):  Remove t_mddriver-$(WHAT) stuff, ditto.
-	(check):  Use $(EXEEXT).
-
-Tue Mar 14 17:24:57 1995 Keith Vetter (keithv@fusion.com)
-
-	* md4crypto.c: removed method for DLL data since everything's
-           going into one DLL.
-
-Fri Mar 3 19:01:59 1995 Keith Vetter (keithv@fusion.com)
-
-	* md4crypto.c: added a method to pull in a data structure 
-           from outside a dll.
-
-Thu Mar 2 17:53:35 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: changed LIBNAME for the PC
-
-Tue Feb 28 00:19:06 1995  John Gilmore  (gnu at toad.com)
-
-	* rsa-md4.h:  Avoid <krb5/...> includes.
-
-Mon Feb 20 15:54:1 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: made to work for the PC
-        * md4.c, md4crypt.c md4glue.c: added windows INTERFACE keyword
-        * rsa-md4.h: added windows INTERFACE to prototypes
-
-Thu Feb  2 03:00:41 1995  John Gilmore  <gnu@cygnus.com>
-
-	* Makefile.in (CFLAGS):  Handle $(srcdir) properly in -I options.
-
-Wed Jan 25 20:08:47 1995  John Gilmore  (gnu at toad.com)
-
-	* Makefile.in (CFLAGS):  Add -I../des to pull in DES header file.
-	* 
-rsa-md4.h:  New include file, moved from include/krb5, since
-	it's only used locally.
-	* md4.c, md4crypto.c, md4driver.c, md4glue.c:  Replace <.../...>
-	includes with "..."s.
-
-Thu Oct 13 17:48:21 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* Makefile.in: Add support for the MDx test driver t_mddriver.
-		Run t_mddriver on a "make check", to make sure we have a
-		valid MD4 implementation.
-
-	* md4.c (UL): Add the UL macro to control how unsigned long
-		constants are compiled.  If we have an ANSI C environment,
-		use the UL suffix to keep the compiler from warning about
-		numbers that would overflow a signed long.
-
-Tue Oct  4 14:54:19 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* md4crypto.c:
-	* md4glue.c: Added placeholder for magic number.
-
diff --git a/src/lib/crypto/md5/ChangeLog b/src/lib/crypto/md5/ChangeLog
deleted file mode 100644
index e807323dbd..0000000000
--- a/src/lib/crypto/md5/ChangeLog
+++ /dev/null
@@ -1,323 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2006-01-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (t_mddriver): Include support library.  Use
-	CC_LINK.
-
-2005-05-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* md5.c (Transform) [CONFIG_SMALL]: Roll loops for each round.
-
-2004-02-18  Ken Raeburn  <raeburn@mit.edu>
-
-	* md5.c: Use ANSI C style function definitions.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* rsa-md5.h (rsa_md5_cksumtable_entry,
-	rsa_md5_des_cksumtable_entry): Delete unused declarations.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2001-10-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* t_mddriver.c: Make prototypes unconditional.
-
-2001-10-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* md5.c, rsa-md5.h: Don't explicitly declare pointers FAR any
-	more.
-
-2001-06-12  Ezra Peisach  <epeisach@mit.edu>
-
-	* t_mddriver.c: Cleanup assignments in conditionals w/o parentheses.
-	Add parenthesis abount structure initializers.
-
-2001-03-14  Ken Raeburn  <raeburn@mit.edu>
-
-	* rsa-md5.h: Always use prototypes.
-
-	* md5.c: Use UL suffix instead of UL macro.
-	(UL): Macro deleted.
-
-2000-01-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* md5.c (PADDING): Now const.
-	(krb5_MD5Update): Argument inBuf now points to const.
-	(ROTATE_LEFT): Change (a&b|c) construct to silence gcc warning.
-	* rsa-md5.h (krb5_MD5Update): Update decl.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-Mon May 10 15:20:16 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
-Sun Jul 19 12:00:00 1998  Marc Horowitz <marc@mit.edu>
-
-	* *.c: replace the crypto layer.
-
-Tue Mar  3 08:42:10 1998  Ezra Peisach  <epeisach@kangaroo.mit.edu>
-
-	* Makefile.in (t_cksum): Do not depend on libkrb5.a, use 
-	KRB5_BASE_DEPLIBS.
-
-Wed Feb 18 16:07:46 1998  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in: Remove trailing slash from thisconfigdir.  Fix up
-	BUILDTOP for new conventions.
-
-Fri Feb 13 15:20:54 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in (thisconfigdir), configure.in: Point the
- 		configuration directory at our parent, and remove our
-		local configure.in
-
-Mon Feb  2 17:02:29 1998  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Define BUILDTOP and thisconfigdir in the Makefile
-
-Tue Oct 28 16:36:30 1997  Tom Yu  <tlyu@voltage-multiplier.mit.edu>
-
-	* md5.c: Fix to deal with types longer than 32 bits.
-
-Sat Feb 22 18:54:09 1997  Richard Basch  <basch@lehman.com>
-
-	* Makefile.in: Use some of the new library list build rules in
-		win-post.in
-
-Thu Feb  6 12:48:41 1997  Ezra Peisach  <epeisach@mit.edu>
-
-	* Makefile.in (t_cksum): Link with libkrb5.a as well.
-
-Thu Jan 30 21:42:50 1997  Richard Basch  <basch@lehman.com>
-
-	* md5crypto.c md5glue.c:
-		Change functions to take const args where possible
-
-Thu Nov 21 00:58:04 EST 1996    Richard Basch   <basch@lehman.com>
-
-        * Makefile.in: Win32 build
-
-Sun Dec 29 21:54:24 1996  Tom Yu  <tlyu@mit.edu>
-
-	* Makefile.in:
-	* configure.in: Update to use new library building procedure.
-
-Wed Jun 12 00:11:34 1996  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* rsa-md5.h:
-	* md5.c: Add #ifdef _WIN32 in places where we had #ifdef _MSDOS
-
-Tue May 21 20:29:03 1996  Sam Hartman  <hartmans@mit.edu>
-
-	* Makefile.in (check-unix): Use KRB5_RUN_FLAGS 
-
-Mon May 20 17:19:00 1996  Theodore Y. Ts'o  <tytso@mit.edu>
-
-	* md5crypto.c, md5crypto.h: Change use of RSA_MD5_DES_CKSUM_LENGTH
- 		to use OLD_RSA_MD5_DES_CKSUM_LENGTH and
- 		NEW_RSA_MD5_DES_CKSUM_LENGTH, as appropriate.
-
-	* t_cksum.c (main): Use proper header file constants to get the
- 		correct checksum length for the MD4 and MD5 old-style and
- 		new-style checksum functions.
-
-Sat May 18 01:49:33 1996  Theodore Y. Ts'o  <tytso@mit.edu>
-
-	* md5crypto.c: Define MD5_K5BETA_COMPAT and MD5_K5BETA_COMP_DEF so
- 		that we continue doing things the wrong (broken) way.  All
- 		hail backwards compatibility....  The code now generates
- 		the old checksum, but it will verify both the old and the
- 		correct checksum formats.
-
-		Also fixed two bugs in the "correct" MD5_CRYPTO
-		implementation; use a zero initialization vector, and
-		calculate the confounder at the beginning of the message,
-		not at the end.  
-
-Tue May 14 19:32:51 1996  Richard Basch  <basch@lehman.com>
-
-	* md5crypto.c md5glue.c:
-		ensure the cksum content length is sufficient.
-
-	* t_cksum.c: initialize cksum.length
-
-Fri May 10 01:19:18 1996  Richard Basch  <basch@lehman.com>
-
-	* md5crypto.c: des3-md5 is being replaced with des3-sha
-
-Fri Apr 12 21:27:35 1996  Richard Basch  <basch@lehman.com>
-
-	* rsa-md5.h md5crypto.c md5glue.c md5.c t_cksum.c t_mddriver.c:
-	Renamed the global functions to be krb5_<name>
-
-Thu Mar 28 09:50:58 1996  Richard Basch  <basch@lehman.com>
-
-	* md5crypto.c: Added support for CKSUMTYPE_RSA_MD5_DES3
-
-Sat Jan 27 00:56:38 1996  Mark Eichin  <eichin@cygnus.com>
-
-	* t_cksum.c (main): use proper old-style definition.
-
-Thu Nov 09 17:05:57 1995  Chris Provenzano (proven@mit.edu)
-
-        * t_cksum.c : Remove krb5_enctype from krb5_string_to_key() args.
-
-Fri Oct  6 22:00:32 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in: Remove ##DOS!include of config/windows.in.
-		config/windows.in is now included by wconfig.
-
-Mon Sep 25 16:49:06 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* Makefile.in: Removed "foo:: foo-$(WHAT)" lines from the
-		Makefile. 
-
-Wed Sep 13 10:30:58 1995 Keith Vetter (keithv@fusion.com)
-
-	* md5crypt.c: put function prototype back in, fixed signed/unsigned
-		mismatch and removed unused variables.
-	* md5glue.c: put function prototypes back in.
-
-Wed Sep 06 14:20:57 1995   Chris Provenzano (proven@mit.edu)
-
-        * md5crypto.c, t_cksum.c : s/keytype/enctype/g, s/KEYTYPE/ENCTYPE/g
-
-Tue Sep 05 22:10:34 1995   Chris Provenzano (proven@mit.edu)
-
-        * md5crypto.c : Replace KEYTYPE_DES_CBC_MD5 for KEYTYPE_DES.
-
-	* t_cksum.c : Remove krb5_enctype references, and replace with
-                krb5_keytype where appropriate.
-
-Thu Aug 24 18:40:48 1995  Theodore Y. Ts'o  <tytso@dcl>
-
-	* .Sanitize: Update file list
-
-Thu Jul 27 15:22:42 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* rsa-md5.h - Add this file, relocated from include/krb5.
-
-
-Fri Jul 7 16:20:07 EDT 1995	Paul Park	(pjpark@mit.edu)
-	* Makefile.in - Add t_cksum under unix only.
-	* configure.in - Define MD5_K5BETA_COMPAT to select compatability for
-		md5crypto.c.
-	* md5crypto.c - Correct implementation of RSA-MD5-DES checksums.  Add
-		ability to understand previous implementation and ability to
-		generate these checksums when forced to.
-		- Also add verification procedure for these checksums.
-	* md5glue.c - Add verifier procedure.
-	* t_cksum.c - New checksum verifier test.
-
-Wed Jun 21 10:52:20 1995    <tytso@rsx-11.mit.edu>
-
-	* md5crypto.c, md5glue.c: Change PROTOTYPE -> KRB5_PROTOTYPE
-
-Fri Jun  9 19:18:24 1995    <tytso@rsx-11.mit.edu>
-
-	* md5crypto.c: Fix -Wall nits
-
-	* configure.in: Remove standardized set of autoconf macros, which
-		are now handled by CONFIG_RULES.
-
-Thu May 25 22:16:26 1995  Theodore Y. Ts'o  (tytso@dcl)
-
-	* configure.in, Makefile.in: Add support for shared libraries.
-
-Thu Apr 13 15:49:16 1995 Keith Vetter (keithv@fusion.com)
-
-	* *.[ch]: removed unneeded INTERFACE from non-api functions.
-        * *.h added FAR to pointers visible at to the world.
-
-Thu Mar 16 21:23:03 1995  John Gilmore  (gnu at toad.com)
-
-	* Makefile.in (LDFLAGS):  Remove, conflicts with pre.in.
-	(all):  Remove all-$(WHAT) stuff.
-	(t_mddriver):  Make it build on Mac.
-	(check):  Use $(EXEEXT).
-
-Tue Mar 14 17:24:57 1995 Keith Vetter (keithv@fusion.com)
-
-	* md5crypto.c: removed method for DLL data since everything's
-           going into one DLL.
-
-Fri Mar 3 19:01:59 1995 Keith Vetter (keithv@fusion.com)
-
-	* md5crypto.c: added a method to pull in a data structure 
-           from outside a dll.
-
-Thu Mar 2 17:54:26 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: changed LIBNAME for the PC
-
-Tue Feb 28 00:20:15 1995  John Gilmore  (gnu at toad.com)
-
-	* md5.c, md5crypto.c, md5glue.c, t_mddriver.c:  Avoid <krb5/...>
-	includes.
-
-Mon Feb 20 15:54:1 1995 Keith Vetter (keithv@fusion.com)
-
-	* Makefile.in: made to work for the PC
-        * md5.c, md5crypt.c md5glue.c: added windows INTERFACE keyword
-
-Thu Feb  2 03:01:28 1995  John Gilmore  <gnu@cygnus.com>
-
-	* Makefile.in (CFLAGS):  Handle $(srcdir) properly in -I options.
-
-Wed Jan 25 20:11:30 1995  John Gilmore  (gnu at toad.com)
-
-	* Makefile.in (CFLAGS):  Use -I../des to pull in include file.
-	* md5.c, md5crypto.c, md5glue.c, t_mddriver.c:  Replace <.../...>
-	includes with "..."s.
-
-Fri Oct 14 00:22:19 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* t_mddriver.c (MDString, MDTestSuite): Cast char pointer to the
-		expected unsigned char pointer, since that's what MDUpdate
-		requires. 
-
-Thu Oct 13 17:50:19 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* Makefile.in: Add support for the MDx test driver t_mddriver.
-		Run t_mddriver on a "make check", to make sure we have a
-		valid MD5 implementation.
-
-	* md5.c (UL): Add the UL macro to control how unsigned long
-		constants are compiled.  If we have an ANSI C environment,
-		use the UL suffix to keep the compiler from warning about
-		numbers that would overflow a signed long.
-
-Tue Oct  4 14:55:10 1994  Theodore Y. Ts'o  (tytso@dcl)
-
-	* md5crypto.c:
-	* md5glue.c: Added placeholder for magic number.
-
-
diff --git a/src/lib/crypto/old/ChangeLog b/src/lib/crypto/old/ChangeLog
deleted file mode 100644
index af8d943744..0000000000
--- a/src/lib/crypto/old/ChangeLog
+++ /dev/null
@@ -1,126 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2004-02-18  Ken Raeburn  <raeburn@mit.edu>
-
-	* des_stringtokey.c: Use ANSI C style function definitions.
-
-2003-07-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* old_decrypt.c (krb5_old_decrypt): Use block_size and hashsize
-	fields instead of calling functions.
-	* old_encrypt.c (krb5_old_encrypt_length, krb5_old_encrypt):
-	Likewise.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-05-23  Sam Hartman  <hartmans@mit.edu>
-
-	* des_stringtokey.c (krb5int_des_string_to_key): If param has  one
-	byte, treat it as a type.   Type 0 is normal, type 1 is AFS
-	string2key. 
-
-2003-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* des_stringtokey.c (krb5int_des_string_to_key): Renamed from
-	krb5_... and added s2k-params argument which must be null.
-	* old.h: Updated.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2001-10-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* des_stringtokey.c, old.h: Make prototypes unconditional.
-
-2001-10-03  Ken Raeburn  <raeburn@mit.edu>
-
-	* des_stringtokey.c: Don't explicitly declare pointers FAR any
-	more.
-
-2001-04-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* old_decrypt.c (krb5_old_decrypt): Fix casts.
-	* old_encrypt.c (krb5_old_encrypt): Likewise.
-
-2001-03-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (STLIBOBJS): Undo last change.
-
-2001-03-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* old_decrypt.c (memmove): Delete macro definition.
-	(krb5_old_decrypt): Define with prototype form.
-	* old_encrypt.c (krb5_old_encrypt_length, krb5_old_encrypt):
-	Define with prototype form.
-
-	* Makefile.in (STLIBOBJS): Nothing uses des_stringtokey.o, drop
-	it.
-
-2001-03-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* des_stringtokey.c, old.h, old_decrypt.c, old_encrypt.c: Use
-	const instead of krb5_const.
-
-2000-06-03  Tom Yu  <tlyu@mit.edu>
-
-	* old_encrypt.c (krb5_old_encrypt): Chain ivecs.
-
-	* old_decrypt.c (krb5_old_decrypt): Chain ivecs.
-
-2000-01-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* des_stringtokey.c (mit_des_string_to_key_int): Declare.
-	* old_decrypt.c (krb5_old_decrypt): Delete unused variable.
-	Change if(a=b) constructs to silence gcc warning.
-	* old_encrypt.c (krb5_old_encrypt): Change if(a=b) constructs to
-	silence gcc warning.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-1999-08-25  Ken Raeburn  <raeburn@mit.edu>
-
-	* old_decrypt.c (memmove) [HAVE_BCOPY && !HAVE_MEMMOVE]: Define to
-	use bcopy.  Should work unless any system has no memmove *and*
-	bcopy isn't safe with overlaps.
-
-Mon May 10 15:20:32 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-Wed Dec 16 16:14:02 1998  Tom Yu  <tlyu@mit.edu>
-
-	* old_decrypt.c (krb5_old_decrypt): Initialize the ivec to the key
- 	if we're using DES_CBC_CRC, for backwards compatibility.  We
- 	weren't noticing this before because it only trashes the first
- 	block, which is the confounder, which we weren't actually
- 	verifying because checksum was unconditionally succeeding prior to
- 	the other patch.
-
-Thu Dec 10 22:16:14 1998  Tom Yu  <tlyu@mit.edu>
-
-	* old_decrypt.c (krb5_old_decrypt): Actually compare the
-	calculated checksum against the provided checksum.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
diff --git a/src/lib/crypto/raw/ChangeLog b/src/lib/crypto/raw/ChangeLog
deleted file mode 100644
index 311cade1cf..0000000000
--- a/src/lib/crypto/raw/ChangeLog
+++ /dev/null
@@ -1,55 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2004-02-18  Ken Raeburn  <raeburn@mit.edu>
-
-	* raw_decrypt.c, raw_encrypt.c: Use ANSI C style function
-	definitions.
-
-2003-07-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* raw_encrypt.c (krb5_raw_encrypt_length): Use block_size field
-	instead of calling a function.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2001-10-09  Ken Raeburn  <raeburn@mit.edu>
-
-	* raw.h: Make prototypes unconditional.
-
-2001-03-05  Ken Raeburn  <raeburn@mit.edu>
-
-	* raw.h, raw_decrypt.c, raw_encrypt.c: Use const instead of
-	krb5_const.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-Mon May 10 15:20:51 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
diff --git a/src/lib/crypto/sha1/ChangeLog b/src/lib/crypto/sha1/ChangeLog
deleted file mode 100644
index 8c473b5e67..0000000000
--- a/src/lib/crypto/sha1/ChangeLog
+++ /dev/null
@@ -1,110 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2006-03-30  Ken Raeburn  <raeburn@mit.edu>
-
-	* shs.c: Include shs.h first.
-
-2006-03-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (check-unix): Use RUN_SETUP.
-
-2006-01-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (t_shs, t_shs3): Include support library.  Use
-	CC_LINK.
-
-2005-05-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* shs.c (SHSTransform) [CONFIG_SMALL]: Roll loops for each round.
-
-2004-02-18  Ken Raeburn  <raeburn@mit.edu>
-
-	* shs.c: Use ANSI C style function definitions.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-03-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* shs.h (nist_sha_cksumtable_entry, hmac_sha_cksumtable_entry):
-	Delete unused declarations.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-12-23  Ezra Peisach  <epeisach@bu.edu>
-
-	* t_shs3.c: Signed/unsigned cleanup. Provide function prototypes. 
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-06-07  Miro Jurisic  <meeroh@mit.edu>
-
-	* shs.h: use "" include for k5-int.h
-	[pullup from 1-2-2-branch]
-
-2001-12-05  Ezra Peisach  <epeisach@mit.edu>
-
-	* shs.c, shs.h (shsUpdate): Declare second argument as const.
-
-2001-07-16  Ken Raeburn  <raeburn@mit.edu>
-
-	* t_shs3.c: New test file from Marcus Watts.
-	(longReverse): Resurrected function long since deleted from
-	shs.c.
-	* Makefile.in (check-unix, check-windows): Use t_shs3 test.
-	(clean): Delete it.
-
-	* shs.c (SHSTransform): Make input data pointer point to const.
-	(SHSUpdate): Bugfixes suggested by Marcus Watts, to fix buffer
-	overruns, bugs with small or odd block sizes.
-
-2001-07-05  Danilo Almeida  <dalmeida@mit.edu>
-
-	* shs.h, shs.c, t_shs.c: Fix sha1 on Windows by renaming LONG to
-	SHS_LONG to avoid problem with LONG being signed on Windows.
-	Rename BYTE to SHS_BYTE to avoid any name colisions with Windows
-	(where BYTE and LONG are types defined in the Platform SDK).
-
-2001-06-21  Ezra Peisach  <epeisach@mit.edu>
-
-	* t_shs.c: Cast arguments to match printf format. Declare main as
-	returning int. Comment out unused variables.
-
-2001-03-14  Ken Raeburn  <raeburn@mit.edu>
-
-	* shs.h: Stop using KRB5_PROTOTYPE.
-
-2000-01-21  Ken Raeburn  <raeburn@mit.edu>
-
-	* shs.c (ROTL): Change (a&b|c) construct to make meaning clear,
-	and silence gcc warning.
-	(longReverse): Delete unused function.
-	(shsFinal): Delete unused variable.
-
-1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>
-
-	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
-	LOCAL_INCLUDES such that one can override CFLAGS from the command
-	line without losing CPP search patchs and defines. Some associated
-	Makefile cleanup.
-
-Mon May 10 15:21:10 1999  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Do win32 build in subdir.
-
-1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>
-
-	* Makefile.in: Set the myfulldir and mydir variables (which are
-		relative to buildtop and thisconfigdir, respectively.)
-
diff --git a/src/lib/crypto/yarrow/ChangeLog b/src/lib/crypto/yarrow/ChangeLog
deleted file mode 100644
index b38b00946b..0000000000
--- a/src/lib/crypto/yarrow/ChangeLog
+++ /dev/null
@@ -1,158 +0,0 @@
-2006-04-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (DEFS): Make empty.
-
-2006-03-11  Ken Raeburn  <raeburn@mit.edu>
-
-	* ytypes.h: Don't look for autoconf.h in krb5/.
-
-2005-05-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* ytypes.h: Include autoconf.h.  Include sys/types.h only if it
-	exists.
-
-2005-04-28  Ken Raeburn  <raeburn@mit.edu>
-
-	* yarrow.c: Delete old macintosh support.
-	(yarrow_input_maybe_locking): Do the optional locking, and verify
-	that the mutex is locked, before doing anything else.
-	(yarrow_reseed_locked): Verify that the global mutex is locked
-	before doing anything else.
-
-2005-01-13  Ken Raeburn  <raeburn@mit.edu>
-
-	* yarrow.c (yarrow_reseed_locked): Renamed from
-	krb5int_yarrow_reseed and made static.
-	(Yarrow_detect_fork, yarrow_input_maybe_locking,
-	krb5int_yarrow_output_Block): Call it.
-	(krb5int_yarrow_reseed): New function, grabs lock and calls the
-	old version.
-	(krb5int_yarrow_final): Hold the lock until after clearing the
-	Yarrow context data.
-
-2005-01-13  Ezra Peisach  <epeisach@mit.edu>
-
-	* yarrow.c: Declare yarrow_gate_locked static before first use.
-
-2004-11-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* yarrow.c (yarrow_input_maybe_locking): Renamed from
-	yarrow_input_maybe_locking, made static.  New argument indicates
-	whether or not to do locking.
-	(krb5int_yarrow_input): New wrapper function.
-	(yarrow_input_locked): New wrapper function.
-	(Yarrow_detect_fork): Call yarrow_input_locked.
-
-2004-11-15  Sam Hartman  <hartmans@mit.edu>
-
-	* ycipher.h: Use AES256 not 3des
-
-2004-11-01  Ken Raeburn  <raeburn@mit.edu>
-
-	* yarrow.c (krb5int_yarrow_input, krb5int_yarrow_final): Don't
-	check for forking here.
-	(yarrow_output_locked): Split out from krb5int_yarrow_output,
-	without locking.
-	(krb5int_yarrow_output): Do locking and call yarrow_output_locked.
-	(yarrow_gate_locked): New function; uses yarrow_output_locked.
-	(krb5int_yarrow_output_Block): Use yarrow_gate_locked.
-
-2004-10-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* ylock.h: Include k5-thread.h.
-	(krb5int_yarrow_lock): Declare.
-	(LOCK, UNLOCK): Define as macros using the k5_mutex_ macros.
-
-2004-06-04  Ken Raeburn  <raeburn@mit.edu>
-
-	* yarrow.c (yarrow_str_error): Now const.
-
-2004-05-26  Ezra Peisach  <epeisach@mit.edu>
-
-	* yarrow.c (krb5int_yarrow_final): Call
-	krb5int_yarrow_cipher_final before zeroing out reference to
-	memory.
-
-	* ycipher.[ch] (krb5int_yarrow_cipher_final): Free CIPHER_CTX memory
-	allocated by krb5int_yarrpw_cipher_init().
-
-2003-07-22  Ken Raeburn  <raeburn@mit.edu>
-
-	* ycipher.c (krb5int_yarrow_cipher_init): Use keybytes and
-	keylength fields instead of calling a function.
-
-2003-07-17  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
-
-2003-01-10  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
-
-2002-08-29  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Revert $(S)=>/ change, for Windows support.
-
-2002-08-23  Ken Raeburn  <raeburn@mit.edu>
-
-	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
-
-2002-04-10  Danilo Almeida  <dalmeida@mit.edu>
-
-	* yarrow.c: Use the canonical _WIN32 instead of WIN32 to test for
-	Win32.  Include port-sockets.h on Win32 (now that using
-	WIN32_LEAN_AND_MEAN).
-
-2002-01-14  Sam Hartman  <hartmans@mit.edu>
-
-	* yarrow.c (krb5int_yarrow_reseed): The MS word of  the integer
-	counter going into v_i will always be zero; don't try
-	right-shifting by 32. 
-
-2001-12-05  Ezra Peisach  <epeisach@mit.edu>
-
-	* yarrow.c (krb5int_yarrow_stretch): Delare local variable unsigned. 
-	(krb5int_yarrow_init): Zero cipher context on init.
-
-	* yhash.h (HASH_Final): Use a variable other than out (shadow in
-	yarrow.c)
-
-2001-11-21  Sam Hartman  <hartmans@mit.edu>
-
-	* yarrow.c (Yarrow_detect_fork): Reseed the number generator including the fork rather than throwing away state.
-
-2001-11-19  Sam Hartman  <hartmans@mit.edu>
-
-	* yhash.h: Work around sha1 implementation using host byte order
-
-2001-11-19  Danilo Almeida  <dalmeida@mit.edu>
-
-	* Makefile.in: Fix typo OUTP -> OUTPRE.
-
-2001-11-14  Sam Hartman  <hartmans@mit.edu>
-
-	* ycipher.c (krb5int_yarrow_cipher_init):  Use free not free_keyblock_contents
-
-2001-11-09  Sam Hartman  <hartmans@mit.edu>
-
-	* Makefile.in: New file
-
-	* yhash.h :  Use krb5 shaa1
-
-	* yarrow.c (Yarrow_Reseed):  For all calls to cipher_init, use TRY
-	block and  use function rather than macros 
-	(Yarrow_Reseed):  call encrypt block function not macro
-
-	* ycipher.h: Make the the interface use functions not macros; convert for krb5 ciphers
-
-2001-11-08  Sam Hartman  <hartmans@mit.edu>
-
-	* ylock.h (lock UNLOCK):  Turn into no-ops
-
-	* yarrow.h: Don't use #error
-	(YARROW_DLL): Don't actually ever export or import from win32 dlls as Yarrow is not a public part of krb5 API
-	(yarrow_poll): Drop from the API
-	Remove MAc-specific memset and  memcpy
-
-	* ytypes.h yarrow.c: Align with krb5 int types
-