diff options
| author | Greg Hudson <ghudson@mit.edu> | 2010-02-18 18:04:47 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2010-02-18 18:04:47 +0000 |
| commit | 07fb1e7b435ce005fe629be07d05de912d61307f (patch) | |
| tree | 324c2491c700bbb869fa1dd47611b09fed6f832b /src/plugins | |
| parent | f540177be7b268ba317aa21334e5be391d20f256 (diff) | |
| download | krb5-07fb1e7b435ce005fe629be07d05de912d61307f.tar.gz krb5-07fb1e7b435ce005fe629be07d05de912d61307f.tar.xz krb5-07fb1e7b435ce005fe629be07d05de912d61307f.zip | |
Fix cipher state chaining in OpenSSL back end
Make cipher state chaining work in the OpenSSL back end for des, des3,
and arcfour enc providers. Subtleties:
* DES and DES3 have checks to avoid clobbering ivec with uninitialized
data if there is no data to encrypt.
* Arcfour saves the OpenSSL cipher context across calls. To protect
against a caller improperly copying the state (which happens to work
with other enc providers), a loopback pointer is used, as in GSSAPI.
* EVP_EncryptFinal_ex is unnecessary with stream ciphers and would
interfere with cipher state chaining if it did anything, so just
remove it.
ticket: 6665
target_version: 1.8
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23734 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/plugins')
0 files changed, 0 insertions, 0 deletions