summaryrefslogtreecommitdiffstats
path: root/src/lib/crypto/dk/ChangeLog
blob: fb32bfdc3ff89290bd23268b005873ae347ad66c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
2004-02-24  Sam Hartman  <hartmans@avalanche-breakdown.mit.edu>

	* dk.h: As below.

	* checksum.c dk_decrypt.c dk_encrypt.c: Remove ENCTYPE_LOCAL_DES3_HMAC_SHA1

2004-02-18  Ken Raeburn  <raeburn@mit.edu>

	* checksum.c, derive.c, dk_decrypt.c, dk_encrypt.c: Use ANSI C
	style function definitions.

2004-02-13  Ken Raeburn  <raeburn@mit.edu>

	* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac): New argument
	IVEC_MODE.  If clear, same old behavior.  If set, copy out next
	to last block for CTS.
	(krb5_dk_decrypt, krb5int_aes_dk_decrypt): Pass extra argument.
	* dk_encrypt.c (krb5int_aes_dk_encrypt): For IV, copy out next to
	last block for CTS.

2003-07-22  Ken Raeburn  <raeburn@mit.edu>

	* checksum.c (krb5_dk_make_checksum, krb5_marc_dk_make_checksum):
	Use new numeric fields for key/bolck sizes instead of calling
	functions.
	* derive.c (krb5_derive_key, krb5_derive_random): Likewise.
	* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac,
	krb5_marc_dk_decrypt): Likewise.
	* dk_encrypt.c (krb5_dk_encrypt_length, krb5_dk_encrypt,
	krb5int_aes_encrypt_length, trunc_hmac, krb5int_aes_dk_encrypt,
	krb5_marc_dk_encrypt_length, krb5_mark_dk_encrypt): Likewise.
	* stringtokey.c (krb5int_dk_string_to_key): Likewise.

2003-07-17  Ken Raeburn  <raeburn@mit.edu>

	* Makefile.in (LIBNAME) [##WIN16##]: Don't define.

2003-04-17  Ken Raeburn  <raeburn@mit.edu>

	* dk_encrypt.c (krb5int_aes_dk_encrypt): Set output length
	properly.

2003-04-13  Ken Raeburn  <raeburn@mit.edu>

	* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac): Renamed from
	krb5_dk_decrypt, made static, added extra HMACSIZE argument to
	indicate size of HMAC.  Cast byte values to char to silence
	compiler warning.
	(krb5_dk_decrypt): Call it.
	(krb5int_aes_dk_decrypt): New function.
	* dk_encrypt.c (krb5_dk_encrypt): Cast byte values to char to
	silence compiler warning.
	(krb5int_aes_encrypt_length, trunc_hmac, krb5int_aes_dk_encrypt):
	New functions.
	* dk.h (krb5int_aes_encrypt_length, krb5int_aes_dk_encrypt,
	krb5int_aes_dk_decrypt): Declare.

2003-03-04  Ken Raeburn  <raeburn@mit.edu>

	* stringtokey.c (krb5int_dk_string_to_key): Renamed from
	krb5_... and added s2k-params argument.
	* dk.h: Updated.

2003-01-10  Ken Raeburn  <raeburn@mit.edu>

	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.

2002-08-29  Ken Raeburn  <raeburn@mit.edu>

	* Makefile.in: Revert $(S)=>/ change, for Windows support.

2002-08-23  Ken Raeburn  <raeburn@mit.edu>

	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.

2001-10-09  Ken Raeburn  <raeburn@mit.edu>

	* dk.h: Make prototypes unconditional.

2001-06-21  Ken Raeburn  <raeburn@mit.edu>

	* derive.c: Include etypes.h.
	(krb5_derive_random, krb5_random2key): New functions.

	* checksum.c (krb5_dk_make_checksum): Cast 0x99 to char explicitly
	to silence warnings.

2001-04-10  Ken Raeburn  <raeburn@mit.edu>

	* checksum.c (krb5_dk_make_checksum): Add casts when mixing
	pointers with different target signedness.
	* dk_decrypt.c (krb5_dk_decrypt): Likewise.
	* stringtokey.c (krb5_dk_string_to_key): Likewise.

2001-03-05  Ken Raeburn  <raeburn@mit.edu>

	* checksum.c, derive.c, dk.h, dk_decrypt.c, dk_encrypt.c,
	stringtokey.c: Use const instead of krb5_const.

2001-01-23  Ken Raeburn  <raeburn@mit.edu>

	* stringtokey.c (kerberos): Now const.
	(krb5_dk_string_to_key): Cast it to non-const.

2000-06-03  Tom Yu  <tlyu@mit.edu>

	* dk_encrypt.c (krb5_dk_encrypt, krb5_marc_dk_encrypt): Chain
	ivecs.
	
	* dk_decrypt.c (krb5_dk_decrypt, krb5_marc_dk_decrypt): Chain
	ivecs.

2000-04-28  Ken Raeburn  <raeburn@mit.edu>

	* derive.c (krb5_derive_key): If memory allocation fails, release
	other allocated blocks before returning, instead of trying to
	release them after returning.

2000-01-21  Ken Raeburn  <raeburn@mit.edu>

	* checksum.c (krb5_dk_make_checksum): enc_providers are now
	const.  Modify if(a=b) assignment/test constructs to silence gcc
	warnings.
	* dk_decrypt.c (krb5_dk_decrypt, krb5_marc_dk_decrypt): Ditto.
	* dk_encrypt.c (krb5_dk_encrypt, krb5_marc_dk_encrypt): Ditto.
	* stringtokey.c (krb5_dk_string_to_key): Ditto.  Include dk.h.

1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>

	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
	LOCAL_INCLUDES such that one can override CFLAGS from the command
	line without losing CPP search patchs and defines. Some associated
	Makefile cleanup.

1999-06-28  Tom Yu  <tlyu@mit.edu>

	* dk_encrypt.c (krb5_marc_dk_encrypt): Call
	krb5_marc_dk_encrypt_length() instead of krb5_dk_encrypt_length()
	to prevent blocksize errors.

Mon May 10 15:16:34 1999  Danilo Almeida  <dalmeida@mit.edu>

	* Makefile.in: Do win32 build in subdir.

Tue Jan  5 00:09:13 1999  Tom Yu  <tlyu@mit.edu>

	* dk.h: Add prototypes for krb5_marc_dk_*.

	* dk_encrypt.c (krb5_marc_dk_encrypt): Add compat for 32-bit
	length coded ciphertext.

	* dk_decrypt.c (krb5_marc_dk_decrypt): Add compat for 32-bit
	length coded ciphertext.

	* checksum.c: Add compat for 32-bit length included checksum.
	Note that nothing uses this at the moment, and probably
	shouldn't.

1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>

	* Makefile.in: Set the myfulldir and mydir variables (which are
		relative to buildtop and thisconfigdir, respectively.)