summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Implement new APIs to allow improved crypto performanceGreg Hudson2009-10-19105-1069/+1876
| | | | | | | | | | | Merge branches/enc-perf to trunk. Adds the krb5_key opaque type, the krb5_k_* APIs to use them, and caching of derived keys when krb5_k_* functions are used. Updates the krb5 auth context and GSS id-rec to use krb5_keys. ticket: 6576 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22944 dc483132-0cff-0310-8789-dd5450dbe970
* Update prototype files to conform with newer whitespace rulesTom Yu2009-10-193-10/+12
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22937 dc483132-0cff-0310-8789-dd5450dbe970
* Include des_int.h for mit_des_fixup_key_parity prototype. Adjust Makefile.inEzra Peisach2009-10-182-1/+2
| | | | | | to find the proper header. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22912 dc483132-0cff-0310-8789-dd5450dbe970
* Remove adb.h as it is not used in the source treeEzra Peisach2009-10-181-134/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22911 dc483132-0cff-0310-8789-dd5450dbe970
* Properly handle ivec for chaining opsZhanna Tsitkov2009-10-161-175/+34
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22906 dc483132-0cff-0310-8789-dd5450dbe970
* Fix the value of ivec in aes_decrypt_iovZhanna Tsitkov2009-10-161-3/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22905 dc483132-0cff-0310-8789-dd5450dbe970
* Enable t_cts testZhanna Tsitkov2009-10-151-4/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22902 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed aes to handle the input buffers of the various sizesZhanna Tsitkov2009-10-151-140/+313
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22900 dc483132-0cff-0310-8789-dd5450dbe970
* Fix preauth looping in krb5_get_init_credsGreg Hudson2009-10-131-2/+16
| | | | | | | | | | | | | | In 1.7, krb5_get_init_creds will continue attempting the same built-in preauth mechanism (e.g. encrypted timestamp) until the loop counter maxes out. Until the preauth framework can remember not to retry built-in mechanisms, only continue with preauth after a PREAUTH_FAILED error resulting from optimistic preauth. ticket: 6573 tags: pullup target_version: 1.7.1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22890 dc483132-0cff-0310-8789-dd5450dbe970
* Revert a small part of r22736 which incorrectly fixed a preauthGreg Hudson2009-10-131-4/+2
| | | | | | looping bug in krb5_get_init_creds. A more correct fix will follow. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22888 dc483132-0cff-0310-8789-dd5450dbe970
* Fix memory leak and init those magic number fields to prevent compiler warningEzra Peisach2009-10-101-1/+4
| | | | | | when structure copied. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22879 dc483132-0cff-0310-8789-dd5450dbe970
* Clean nfold.o on make cleanEzra Peisach2009-10-101-7/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22878 dc483132-0cff-0310-8789-dd5450dbe970
* Move destest to builtin/des, because it depends on overriding someTom Yu2009-10-1060-1589/+1953
| | | | | | | | internals. Make depend. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22877 dc483132-0cff-0310-8789-dd5450dbe970
* Remove krb5.conf, bigendian.o, and bigendian on make cleanEzra Peisach2009-10-101-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22876 dc483132-0cff-0310-8789-dd5450dbe970
* Implement GSS naming extensions and authdata verificationGreg Hudson2009-10-09106-380/+7739
| | | | | | | | | Merge Luke's users/lhoward/authdata branch to trunk. Implements GSS naming extensions and verification of authorization data. ticket: 6572 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22875 dc483132-0cff-0310-8789-dd5450dbe970
* Get aes-gen to build again (for the default back end, at least)Greg Hudson2009-10-091-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22873 dc483132-0cff-0310-8789-dd5450dbe970
* In asn1_decode_enc_kdc_rep_part, don't leak the enc_padata field onGreg Hudson2009-10-091-0/+1
| | | | | | | | | | invalid representations. ticket: 6571 tags: pullup target_version: 1.7.1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22872 dc483132-0cff-0310-8789-dd5450dbe970
* In anticipation of a new version of OpenSSL 1.0.0, support renamed API: ↵Zhanna Tsitkov2009-10-081-1/+5
| | | | | | EVP_PKEY_decrypt -> EVP_PKEY_decrypt_old git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22871 dc483132-0cff-0310-8789-dd5450dbe970
* In krb5_c_verify_checksum, avoid the structure copy of *data since weGreg Hudson2009-10-081-1/+2
| | | | | | | don't care about data->magic. Squashes a bunch of unimportant Coverity defects. (May not be the correct long-term solution.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22868 dc483132-0cff-0310-8789-dd5450dbe970
* In krb5_calculate_checksum (a compatibility routine), initializeGreg Hudson2009-10-081-0/+1
| | | | | | | | key.enctype to ENCTYPE_NULL. This will predictably fail to match a keyed hash's enctype, which may not be the best behavior, but is better than unpredictably failing to match it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22867 dc483132-0cff-0310-8789-dd5450dbe970
* In krb5_c_make_checksum, avoid the structure copy of *input since weGreg Hudson2009-10-071-1/+2
| | | | | | | don't care about input->magic. Squashes a bunch of unimportant Coverity defects. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22866 dc483132-0cff-0310-8789-dd5450dbe970
* Fix krb5_c_weak_enctype in the case of invalid enctypes; r22839Greg Hudson2009-10-071-1/+1
| | | | | | simplified it a bit too much. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22865 dc483132-0cff-0310-8789-dd5450dbe970
* In krb5_encrypt_helper, return ENOMEM instead of 0 if we can'tGreg Hudson2009-10-061-1/+1
| | | | | | allocate the ciphertext buffer. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22860 dc483132-0cff-0310-8789-dd5450dbe970
* Crypto modularity proj: Populate openssl/aes dirZhanna Tsitkov2009-10-0610-0/+1546
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22859 dc483132-0cff-0310-8789-dd5450dbe970
* Slightly more comprehensible message for KRB5_RC_IOKen Raeburn2009-10-061-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22857 dc483132-0cff-0310-8789-dd5450dbe970
* Fix object file pathZhanna Tsitkov2009-10-061-5/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22856 dc483132-0cff-0310-8789-dd5450dbe970
* Impl. krb5int_aes_enc/decrypt_iov. Passes t_encrypt testZhanna Tsitkov2009-10-041-149/+144
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22843 dc483132-0cff-0310-8789-dd5450dbe970
* Update the crypto derived key support code to conform to most of theGreg Hudson2009-10-037-481/+334
| | | | | | | current coding practices (except lack of tabs). Use the helper functions k5alloc, zapfree, and find_enctype to reduce code size. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22840 dc483132-0cff-0310-8789-dd5450dbe970
* Update the crypto API glue to conform to most of the current codingGreg Hudson2009-10-0339-976/+736
| | | | | | | practices (except lack of tabs). Use the helper functions k5alloc, zapfree, and find_enctype to reduce code size. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22839 dc483132-0cff-0310-8789-dd5450dbe970
* Add convenience functions zapfree (test for null, zap, free) andGreg Hudson2009-10-031-0/+21
| | | | | | k5alloc (allocate memory, set a krb5_error_code result) to k5-int.h. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22838 dc483132-0cff-0310-8789-dd5450dbe970
* Crypto modularity proj: Populae openssl/arcfour dirZhanna Tsitkov2009-10-015-0/+788
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22825 dc483132-0cff-0310-8789-dd5450dbe970
* Crypto modularity proj: Populate openssl/des dir.Zhanna Tsitkov2009-10-0115-0/+848
| | | | | | To avoid breaking the export list some functions (mostly mit_xxx) are left in place with the disabled functionality. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22821 dc483132-0cff-0310-8789-dd5450dbe970
* Crypto modulrity proj: Basic AES crypto for openssl implZhanna Tsitkov2009-10-011-0/+505
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22820 dc483132-0cff-0310-8789-dd5450dbe970
* CleanupZhanna Tsitkov2009-10-014-143/+116
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22819 dc483132-0cff-0310-8789-dd5450dbe970
* Crypto modularity proj: SHS_INFO structure is defined differently for crypto ↵Zhanna Tsitkov2009-09-3033-54/+351
| | | | | | | | | impl's. Files hash_sha1.c and yhash.h are affected by this difference. Move hash_provider into the backend The following bigredbutton is used to suppress svn complains about the trailing spaces in the moved/copied dirs. bigredbutton: whitespace git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22815 dc483132-0cff-0310-8789-dd5450dbe970
* Fix include path to pick up the correct headersZhanna Tsitkov2009-09-291-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22814 dc483132-0cff-0310-8789-dd5450dbe970
* Remove OBJS.ST from SUBDIROBJLISTS so that running make does notEzra Peisach2009-09-292-2/+2
| | | | | | | | rebuild shared library when running make from the top. (make otherwise thinks that OBJS.ST depends on "all-recurse" - which does not exist, and rebuilds it all the time. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22806 dc483132-0cff-0310-8789-dd5450dbe970
* Fix a braino in r22790Greg Hudson2009-09-281-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22791 dc483132-0cff-0310-8789-dd5450dbe970
* Fix a few problems introduced by r22787Greg Hudson2009-09-282-9/+7
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22790 dc483132-0cff-0310-8789-dd5450dbe970
* Add keytab_local.c to the kadmin client SRCS variable, so that weGreg Hudson2009-09-252-1/+20
| | | | | | | generate dependencies for its object file. This change causes kadmin.local to be properly rebuilt when keytab.c changes. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22789 dc483132-0cff-0310-8789-dd5450dbe970
* Fix a few bugs in kadmin's keytab.c from r22785Greg Hudson2009-09-251-13/+10
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22788 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up krb5_get_credentials:Greg Hudson2009-09-253-65/+59
| | | | | | | | | | | * Use the current coding practice for output parameters. * Rename the helper function krb5_get_credentials_core to krb5int_construct_matching_creds and document it. * Don't fail out if we fail to cache intermediate tgts. * Simplify conditional logic and variable handling. ncreds is now always a temporary holder for the resulting credentials. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22787 dc483132-0cff-0310-8789-dd5450dbe970
* Crypto modularity proj: Updated IOV cryptoZhanna Tsitkov2009-09-253-192/+326
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22786 dc483132-0cff-0310-8789-dd5450dbe970
* Update the kadmin client code to most current coding practicesGreg Hudson2009-09-244-1631/+1410
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22785 dc483132-0cff-0310-8789-dd5450dbe970
* Fix kadm5 unit test modified in r22782Greg Hudson2009-09-241-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22784 dc483132-0cff-0310-8789-dd5450dbe970
* Fix a braino in r22782: we don't use strcpy even safely; use strlcpyGreg Hudson2009-09-221-1/+1
| | | | | | instead. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22783 dc483132-0cff-0310-8789-dd5450dbe970
* Improve the mechanism used for addprinc -randkey. In the kadminGreg Hudson2009-09-213-56/+85
| | | | | | | | server, if the password is null when creating a principal, treat that as a request for a random key. In the kadmin client, try using the new method for random key creation and then fall back to the old one. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22782 dc483132-0cff-0310-8789-dd5450dbe970
* Fix addprinc -randkey when policy requires multiple character classesGreg Hudson2009-09-211-6/+7
| | | | | | | | | | | | | The fix for ticket #6074 (r20650) caused a partial regression of ticket #115 (r9210) because the dummy password contained only one character class. As a minimal 1.7 fix, use all five character classes in the dummy password. ticket: 6568 tags: pullup target_version: 1.7.1 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22781 dc483132-0cff-0310-8789-dd5450dbe970
* Fix a few bugs in r22736. Cherry-picked from Luke's authdata branchGreg Hudson2009-09-212-6/+6
| | | | | | ticket: 6563 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22780 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up warnings of unused variables that have crept into the source tree..Ezra Peisach2009-09-204-4/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22779 dc483132-0cff-0310-8789-dd5450dbe970