summaryrefslogtreecommitdiffstats
path: root/src/lib/crypto/ChangeLog
Commit message (Collapse)AuthorAgeFilesLines
* Remove ChangeLog files from the source tree. From now on, theSam Hartman2006-04-111-1121/+0
| | | | | | | subversion commit log entry needs to include information that would have been in the changelog. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17893 dc483132-0cff-0310-8789-dd5450dbe970
* don't use configure-defined macros on command line, use autoconf.h onlyKen Raeburn2006-04-021-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17830 dc483132-0cff-0310-8789-dd5450dbe970
* Include the support library when linking various test programs, because onKen Raeburn2006-01-181-0/+4
| | | | | | | | | Solaris, with the vendor compiler, we'll always get references to krb5int_pthread_loaded due to unused inline functions not being eliminated. (Also inclued it in dependencies, and use CC_LINK when it wasn't used before.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17592 dc483132-0cff-0310-8789-dd5450dbe970
* Remove krb5_callconv from non-exported internal functionSam Hartman2006-01-111-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17585 dc483132-0cff-0310-8789-dd5450dbe970
* don't break make depend in lib/crypto on k5-int.h orderingTom Yu2005-11-291-0/+4
| | | | | | | | | | * t_cts.c, vectors.c: Don't include krb5.h. ticket: new tags: pullup target_version: 1.4.4 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17504 dc483132-0cff-0310-8789-dd5450dbe970
* * t_hmac.c, t_pkcs5.c: Don't include krb5.hKen Raeburn2005-11-181-0/+4
| | | | | | ticket: 3236 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17499 dc483132-0cff-0310-8789-dd5450dbe970
* All configure.in scripts: Use K5_AC_INIT instead of AC_INITKen Raeburn2005-08-201-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17342 dc483132-0cff-0310-8789-dd5450dbe970
* Make "make check" able to link things again..Ken Raeburn2005-05-241-0/+6
| | | | | | | * keyblocks.c (krb5int_c_free_keyblock): Call krb5int_c_free_keyblock_contents instead of krb5_free_keyblock_contents. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17220 dc483132-0cff-0310-8789-dd5450dbe970
* Implement RFC 3961 PRFSam Hartman2005-05-201-0/+19
| | | | | | | | | | | | | | Add krb5_c_prf, a function that implements the RFC 3961 PRF. As part of this change, the krb5_init_keyblock and krb5 free routines move to libk5crypto. Public stubs remain in libkrb5, but the actual implementation is an internal interface in libk5crypto ticket: new Tags: enhancement git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17219 dc483132-0cff-0310-8789-dd5450dbe970
* krb5_c_is_keyed_cksum() is a boolean function. It cannot safely returnJeffrey Altman2005-03-151-0/+9
| | | | | | | | | an error value. Change the error condition to return False (0) instead of 0xFFFFFFFF. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17127 dc483132-0cff-0310-8789-dd5450dbe970
* * prng.c (krb5int_prng_init): Incorporate do_yarrow_init body. Don't checkKen Raeburn2005-01-141-0/+9
| | | | | | | | | | | | inited variable. (inited): Variable deleted. (krb5_c_random_make_octets, krb5int_prng_cleanup): Don't check it. (do_yarrow_init): Deleted. ticket: 2878 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17033 dc483132-0cff-0310-8789-dd5450dbe970
* * prng.c (read_entropy_from_device): Use ssize_t, not size_t, soTom Yu2005-01-131-0/+5
| | | | | | | | | read() returning -1 doesn't cause trouble. ticket: 2871 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17020 dc483132-0cff-0310-8789-dd5450dbe970
* * prng.c (do_yarrow_init): Move mutex initialization here.Ken Raeburn2004-11-171-0/+5
| | | | | | (krb5int_prng_init): Don't do it here. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16880 dc483132-0cff-0310-8789-dd5450dbe970
* Convert Yarrow to use AES not 3des. Update test vectorsSam Hartman2004-11-161-0/+5
| | | | | | | ticket: 2410 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16870 dc483132-0cff-0310-8789-dd5450dbe970
* push yarrow locking down into the yarrow code to reduce contentionKen Raeburn2004-10-301-0/+9
| | | | | | | | | | | | | | | | | | This seems to speed up creating a krb5_context a little bit, when it happens a lot in multiple threads. * prng.c (yarrow_lock): Rename to krb5int_yarrow_lock via macro, and change to be non-static. (krb5int_prng_init): Call do_yarrow_init here. (krb5_c_random_add_entropy): Don't call it here. Don't lock the mutex, either. (krb5_c_random_make_octets): Don't lock the mutex. * yarrow/ylock.h: Include k5-thread.h. (krb5int_yarrow_lock): Declare. (LOCK, UNLOCK): Define as macros using the k5_mutex_ macros. ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16846 dc483132-0cff-0310-8789-dd5450dbe970
* Purge make targets and variables (and a few files) relating to the old,Ken Raeburn2004-06-171-0/+4
| | | | | | unmaintained Mac OS 9 (and earlier) support. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16473 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (SHLIB_RDIRS): SetKen Raeburn2004-06-161-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16462 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (SHLIB_DIRS, SHLIB_EXPLIBS, SHLIB_EXPDEPLIBS): Set to depend onKen Raeburn2004-06-151-0/+8
| | | | | | | | the new support library. (SHLIB_LIBS): Don't define. * configure.in: Use BUILD_LIBRARY_WITH_DEPS instead of the no-deps version. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16447 dc483132-0cff-0310-8789-dd5450dbe970
* Change all uses of LIB in UNIX makefiles to LIBBASE, for better WindowsKen Raeburn2004-06-041-0/+4
| | | | | | | | | compatibility. (Windows nmake exports make variables into the environment, and LIB is treated by the Windows linker as a search path for libraries, thus breaking the linking on Windows of anything needing libraries from the search path in directories where we build libraries on UNIX.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16411 dc483132-0cff-0310-8789-dd5450dbe970
* * prng.c (init_once): Variable deleted.Ken Raeburn2004-06-021-0/+6
| | | | | | | (krb5_c_random_add_entropy): Do the initialization once, using the yarrow_lock mutex instead of k5_once to protect it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16392 dc483132-0cff-0310-8789-dd5450dbe970
* * t_encrypt.c (compare_results): Declare static.Ezra Peisach2004-05-241-0/+7
| | | | | | | | (main): Free allocated memory before exit. * t_nfold.c (fold_kerberos): Change nbytes argument to unsigned. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16358 dc483132-0cff-0310-8789-dd5450dbe970
* Link test programs against thread support libraryKen Raeburn2004-05-131-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16332 dc483132-0cff-0310-8789-dd5450dbe970
* * libk5crypto.exports: Add the DES tables back in; libdes425 uses them directlyKen Raeburn2004-05-131-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16326 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Check for endian.h and machine/endian.h.Ken Raeburn2004-05-071-0/+4
| | | | | | | | | | | * aes/aesopt.h (PLATFORM_BYTE_ORDER): Check for _MIPSEB, _MIPSEL. If endian.h or machine/endian.h is available, include it instead of sys/param.h. Don't mess around with multibyte character constants. ticket: 2551 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16323 dc483132-0cff-0310-8789-dd5450dbe970
* * prng.c (krb5int_prng_cleanup): Destroy the mutexKen Raeburn2004-05-011-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16294 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (LIBINITFUNC, LIBFINIFUNC): New variablesKen Raeburn2004-05-011-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16292 dc483132-0cff-0310-8789-dd5450dbe970
* Add a mutex for the shared static storage used by YarrowKen Raeburn2004-05-011-0/+21
| | | | | | | | | | | | | | | | | | | | | | | * crypto_libinit.c (initialized): Variable deleted. (cryptoint_initialize_library, cryptoint_cleanup_library): Use new macros for automatic shared library init/fini functions. (prng_cleanup): Declaration deleted. (krb5int_prng_init, krb5int_prng_cleanup): Declare. (cryptoint_initialize_library): Call krb5int_prng_init. (krb5int_crypto_init): New function, checks that cryptoint_initialize_library was called successfully. (cryptoint_cleanup_library): Call krb5int_prng_cleanup only if the initializer ran. * crypto_libinit.h: Deleted. * prng.c: Include k5-thread.h. (init_once, init_error, yarrow_lock): New variables. (krb5int_prng_init): New function; finish initializing the mutex lock. (do_yarrow_init): New function. (krb5_c_random_add_entropy): Call it once only. Lock the mutex before processing the input. (krb5_c_random_make_octets): Lock the mutex before extracting random bytes. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16290 dc483132-0cff-0310-8789-dd5450dbe970
* * libk5crypto.exports: Drop the library init/fini functions and the DES tablesKen Raeburn2004-04-301-0/+5
| | | | | | from the export list. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16288 dc483132-0cff-0310-8789-dd5450dbe970
* Add files containing the export lists used on UNIX, in each directoryKen Raeburn2004-04-221-0/+4
| | | | | | | | | | | | | | where we build a shared library, whether or not it gets installed. These should match the complete AIX export lists for a full build including krb4 support, and will eventually be used on other UNIX platforms, and cut down to just the symbols we actually want to export. We'll also have to add additional information, eventually, for versioning and such, but currently this is just a list of C symbol names. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16259 dc483132-0cff-0310-8789-dd5450dbe970
* * pbkdf2.c (hmac1): Make a local copy of the supplied keyblock structure, inKen Raeburn2004-03-221-0/+5
| | | | | | | | | case we want to modify it. ticket: 2453 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16202 dc483132-0cff-0310-8789-dd5450dbe970
* * prng.c (krb5int_prng_cleanup): Renamed from prng_cleanup.Ken Raeburn2004-03-181-0/+6
| | | | | | | * crypto_libinit.c: Include k5-int.h. (cryptoint_cleanup_library): Updated call. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16179 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in: Don't check for --enable-athena and don't define ↵Ken Raeburn2004-03-041-0/+5
| | | | | | ATHENA_DES3_KLUDGE git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16145 dc483132-0cff-0310-8789-dd5450dbe970
* Remove ENCTYPE_LOCAL_DES3_HMAC_SHA1Sam Hartman2004-02-241-0/+4
| | | | | | | | | | Previously, MIT had support for a version of the des3 enctype with a 32-bit length prepended to encrypted data. Remove that support. This is non-standard and is no longer needed even at MIT. Ticket: new git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16122 dc483132-0cff-0310-8789-dd5450dbe970
* protoizeKen Raeburn2004-02-191-0/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16102 dc483132-0cff-0310-8789-dd5450dbe970
* * t_encrypt.c (compare_results): New function.Ken Raeburn2004-02-131-0/+8
| | | | | | | | | | | | (main): Use it to check decryption results against the original plaintext. When testing with cipher state, encrypt and then decrypt (and verify) two messages. * Makefile.in (t_encrypt$(EXEEXT)): Depend on CRYPTO_DEPLIB. ticket: 2229 status: resolved tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16079 dc483132-0cff-0310-8789-dd5450dbe970
* * t_cts.c (test_cts): Process encryption and decryption IVs separately, makeKen Raeburn2004-02-091-0/+5
| | | | | | | | | sure they match, and display the value. ticket: 2223 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16039 dc483132-0cff-0310-8789-dd5450dbe970
* Add platform-dependent 64-bit and inline-function support via new headerKen Raeburn2003-12-131-0/+6
| | | | | | | | | | | | | | | k5-platform.h. Add 64-bit serializer support. [Not needed for ticket 1471, but needed for 2040 and annoying to check in separately.] Add to (internal for now) crypto API a function to get the mandatory checksum type associated with an enctype. New support for server-generated subkey, selected via an auth_context flag. ticket: 1471 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15908 dc483132-0cff-0310-8789-dd5450dbe970
* Change crypto "provider" structures to hold numeric values instead of functionKen Raeburn2003-07-221-1/+14
| | | | | | | pointers for key sizes, block sizes, etc., when the values are always constant for each encryption or hash mechanism. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15714 dc483132-0cff-0310-8789-dd5450dbe970
* crypto library has bogus dependence on com_errKen Raeburn2003-07-221-0/+4
| | | | | | | | | | | | Forgotten debugging code that was never removed... * pbkdf2.c (foo): Never call com_err. ticket: new target_version: 1.3.1 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15707 dc483132-0cff-0310-8789-dd5450dbe970
* With this patch, things seem to work with a Heimdal client and MIT KDCKen Raeburn2003-06-261-0/+4
| | | | | | | | | * checksum_length.c (krb5_c_checksum_length): Handle trunc_size. ticket: 1621 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15652 dc483132-0cff-0310-8789-dd5450dbe970
* * cksumtypes.c (krb5_cksumtypes_list): Add aes128/256 hmacs, with newKen Raeburn2003-06-241-0/+9
| | | | | | | | | | | | trunc_size field. * make_checksum.c (krb5_c_make_checksum): If trunc_size is specified, shrink the computed checksum down to the indicated size. ticket: 1621 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15650 dc483132-0cff-0310-8789-dd5450dbe970
* If krb5_c_string_to_key isSam Hartman2003-06-051-0/+5
| | | | | | | | | | | called with an afs3 salt length for a non-DES enctype, return KRB5_CRYPTO_INTERNAL. Ticket: 1521 Status: open Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15576 dc483132-0cff-0310-8789-dd5450dbe970
* Only allow combine_keys to work on des and 3des enctypes. It is notSam Hartman2003-05-151-0/+4
| | | | | | | | | supported for rc4 or AES until we implement the crypto framework PRF. Ticket: 1248 Tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15448 dc483132-0cff-0310-8789-dd5450dbe970
* provide shorthand aliases for AES enctypesKen Raeburn2003-05-131-0/+5
| | | | | | | | | | | * etypes.c (krb5_enctypes_list): Add names aes128-cts and aes256-cts as aliases. ticket: new target_version: 1.3 tags: pullup git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15433 dc483132-0cff-0310-8789-dd5450dbe970
* Add AES enctypes to t_encryptSam Hartman2003-05-131-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15424 dc483132-0cff-0310-8789-dd5450dbe970
* * IMplement etype_info in KDC. If the request contains any newSam Hartman2003-05-121-0/+4
| | | | | | | | | | | | | | | | | | | | enctypes (currently AES but anything not explicitly listed as old) then only etype_info2 is sent back in response. Send back etype_info2 all the time. Also send back etype_info2 to provide salt and s2kparams with AS reply not just for preauth errors. * Expose interface for getting string2key with parameters (previously implemented but not exported) * IN the client (at least for get_init_creds interface) prfer etype_info2 to etype_info and pw_salt. Pass s2kparams and use string2key_with_params. Ticket: 1454 Status: open Target_Version: 1.3 git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15412 dc483132-0cff-0310-8789-dd5450dbe970
* Finish implementation of CBC+CTS decryption and truncated HMAC for AES.Ken Raeburn2003-04-131-0/+9
| | | | | | | | | Fix memory management bugs. ticket: 1418 status: open git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15351 dc483132-0cff-0310-8789-dd5450dbe970
* * prng.c: use Unix randomness sources on Mac OS XAlexandra Ellwood2003-03-061-0/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15249 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in (OBJFILELIST, OBJFILEDEP) [##DOS]: Add aes.lst.Ken Raeburn2003-03-051-0/+6
| | | | | | (all-windows, clean-windows, check-windows): Process aes directory. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15233 dc483132-0cff-0310-8789-dd5450dbe970
* string_to_key.c (krb5_c_string_to_key_with_params): Declare before useKen Raeburn2003-03-051-1/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15231 dc483132-0cff-0310-8789-dd5450dbe970