diff options
| author | Greg Hudson <ghudson@mit.edu> | 2009-12-10 17:10:10 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2009-12-10 17:10:10 +0000 |
| commit | bad149c2a94f20df57f9d51810aff23aeb0921a4 (patch) | |
| tree | 9a023564d65fe8c46bcc330f950b37b919599c03 /src/lib/crypto/libk5crypto.exports | |
| parent | 009463e22f989a287835228459487c64dcb0b8b3 (diff) | |
| download | krb5-bad149c2a94f20df57f9d51810aff23aeb0921a4.tar.gz krb5-bad149c2a94f20df57f9d51810aff23aeb0921a4.tar.xz krb5-bad149c2a94f20df57f9d51810aff23aeb0921a4.zip | |
Restructure the crypto checksum implementation to minimize
dependencies on the internals of modules.
* Keyhash providers are gone.
* The cksumtypes table contains checksum and verify functions,
similar to the etypes encrypt and decrypt functions. New checksum
functions parallel the old keyhash providers, and there are also
functions for unkeyed and derived-key HMAC checksums.
* The flags field is now used to indicate whether a checksum is
unkeyed, but not whether it is a derived-key HMAC checksum.
* The descbc checksum is handled through a new enc_provider function
which calculates a CBC MAC.
The OpenSSL module does not implement the CBC MAC function (it didn't
implement descbc before). builtin/des could probably get rid of
f_cksum.c (the old DES CBC routine) with some alterations to
string2key.c.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23462 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/crypto/libk5crypto.exports')
| -rw-r--r-- | src/lib/crypto/libk5crypto.exports | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/src/lib/crypto/libk5crypto.exports b/src/lib/crypto/libk5crypto.exports index bc31c3069..b6d7353be 100644 --- a/src/lib/crypto/libk5crypto.exports +++ b/src/lib/crypto/libk5crypto.exports @@ -83,8 +83,6 @@ krb5_k_prf krb5_k_reference_key krb5_k_verify_checksum krb5_k_verify_checksum_iov -krb5int_keyhash_md4des -krb5int_keyhash_md5des mit_crc32 krb5int_aes_encrypt krb5int_MD4Init |