summaryrefslogtreecommitdiffstats
path: root/src/lib
Commit message (Collapse)AuthorAgeFilesLines
* * fetch_mkey: Changed krb5_db_fetch_mkey() such that it will only tryRichard Basch1995-12-121-1/+1
| | | | | | | to set the enctype of the keyblock if the keyblock had it set to ENCTYPE_UNKNOWN. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7210 dc483132-0cff-0310-8789-dd5450dbe970
* * d3_str2ky.c: Updated to include some of the randomness throughoutRichard Basch1995-12-121-7/+3
| | | | | | | the entire key. The second 3-DES CBC encryption of the block should use an ivec of the last cipher block. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7208 dc483132-0cff-0310-8789-dd5450dbe970
* Clean up repository - don't check in configure add .Sanitize and .cvsignoreEzra Peisach1995-12-123-1009/+38
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7205 dc483132-0cff-0310-8789-dd5450dbe970
* New directory for the kdb keytab functions. Currently there is only get andChris Provenzano1995-12-124-0/+1156
| | | | | | | | resolve but these are sufficient to remove the ugly hack where the key is passed to krb5_rd_req() in the user-to-user field of the auth_context. These functions do NOT need to be built on the Macintosh or Windows systems. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7203 dc483132-0cff-0310-8789-dd5450dbe970
* * configure.in : Added subdirectory dbChris Provenzano1995-12-122-1/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7202 dc483132-0cff-0310-8789-dd5450dbe970
* * kdb_dbm.c : Move the krb5_db_context to include/krb5/kdb_dbc.h.Chris Provenzano1995-12-122-79/+113
| | | | | | | | | | * kdb_dbm.c krb5_dbm_db_set_mkey(), krb5_dbm_db_get_mkey(): Functions for associating a master key (krb5_encrypt_block *) to a krb5_db_context. Currently it associates it to the krb5_context and will be fixed once the krb5_db_context is better defined (Post 1.0). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7201 dc483132-0cff-0310-8789-dd5450dbe970
* * fetch_mkey.c: If the keyblock is initialized with an enctype ofRichard Basch1995-12-121-1/+3
| | | | | | | NULL, simply read in the enctype from the stash file and don't try to check it. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7196 dc483132-0cff-0310-8789-dd5450dbe970
* * d3_str2ky.c: Revised 3-DES String-To-Key algorithm to encrypt theRichard Basch1995-12-121-1/+8
| | | | | | folded result twice in the folded key. [Courtesy Uri Blumenthal] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7194 dc483132-0cff-0310-8789-dd5450dbe970
* Add new routine krb5_input_flag_to_string to allow an application toEzra Peisach1995-12-102-0/+16
| | | | | | | loop over the input flag strings for displaying help messages (i.e. modent in krb5_edit). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7187 dc483132-0cff-0310-8789-dd5450dbe970
* Move compat_recvauth to this library so that krb4 can depend on krb5Ezra Peisach1995-12-065-0/+392
| | | | | | (for configurable paths support). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7177 dc483132-0cff-0310-8789-dd5450dbe970
* Commit the removal or compat_recv.oEzra Peisach1995-12-061-302/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7176 dc483132-0cff-0310-8789-dd5450dbe970
* Move compat_recv.c to krb5utilEzra Peisach1995-12-062-2/+4
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7175 dc483132-0cff-0310-8789-dd5450dbe970
* Removed krb4 dependency in building shared libraryEzra Peisach1995-12-062-9/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7174 dc483132-0cff-0310-8789-dd5450dbe970
* * Makefile.in: Shared library depends on krb5 library nowEzra Peisach1995-12-063-3/+15
| | | | | | * configure.in: Pass krb5 library version number to Makefile. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7173 dc483132-0cff-0310-8789-dd5450dbe970
* krb5 is built before krb4. Add krb5util libraryEzra Peisach1995-12-062-1/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7172 dc483132-0cff-0310-8789-dd5450dbe970
* Added support for matching against a supported app. session key typeRichard Basch1995-12-053-0/+81
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7170 dc483132-0cff-0310-8789-dd5450dbe970
* When searching for cached credentials, make sure we are also looking forRichard Basch1995-12-051-1/+1
| | | | | | credentials that are matching a supported application keytype. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7169 dc483132-0cff-0310-8789-dd5450dbe970
* Added two new routines for multiple encryption type support:Richard Basch1995-12-051-13/+131
| | | | | | | | | | | | krb5_set_default_tgs_ktypes(context, ktypes) This routine sets the default application session key types to be used. krb5_get_tgs_ktypes(context, principal, &ktypes) This routine gets the session key types to be used with "principal". At the moment, this only uses the krb5_set_default_tgs_ktypes values or those specified in libdefaults/default_tgs_enctypes (krb5.conf). It is envisioned that this may later support per-host/per-realm lookup. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7168 dc483132-0cff-0310-8789-dd5450dbe970
* Serialize / de-serialize the context structure, which now includes bothRichard Basch1995-12-051-15/+49
| | | | | | TGT session key types and application session key types. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7166 dc483132-0cff-0310-8789-dd5450dbe970
* Instead of using the TGT session key type, use the application sessionRichard Basch1995-12-051-1/+1
| | | | | | key type. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7165 dc483132-0cff-0310-8789-dd5450dbe970
* The wrong encryption system was being initialized. The response to the mk_reqRichard Basch1995-12-051-2/+2
| | | | | | | should be done using the session key and its encryption system, not the ticket's encryption system. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7161 dc483132-0cff-0310-8789-dd5450dbe970
* Moved most string-type conversion routines from libkadm to libkrb5 toRichard Basch1995-12-053-618/+670
| | | | | | | reduce the dependencies on libkadm and for better support of multiple encryption type lookup in krb5.conf. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7159 dc483132-0cff-0310-8789-dd5450dbe970
* Moved most string-type conversion routines from libkadm to libkrb5 toRichard Basch1995-12-052-1/+2
| | | | | | | reduce the dependencies on libkadm and for better support of multiple encryption type lookup in krb5.conf. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7158 dc483132-0cff-0310-8789-dd5450dbe970
* Fixed the description of the algorithm in the commentRichard Basch1995-12-021-2/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7157 dc483132-0cff-0310-8789-dd5450dbe970
* XOR the last byte of weak keys with 0xf0, according to specRichard Basch1995-12-022-2/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7156 dc483132-0cff-0310-8789-dd5450dbe970
* Add rule for building shared object filesTheodore Tso1995-12-012-0/+5
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7153 dc483132-0cff-0310-8789-dd5450dbe970
* Added Changelog fileTheodore Tso1995-12-011-0/+14
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7152 dc483132-0cff-0310-8789-dd5450dbe970
* In case of permission problems, don't unlink the old replay cache;Theodore Tso1995-12-012-1/+9
| | | | | | | make it a hard (repeatable) error. This also reduces the chance we accidentally delete valuable data. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7150 dc483132-0cff-0310-8789-dd5450dbe970
* Initialize rcache to zero, so that on cleanup we don't try to freeTheodore Tso1995-12-012-5/+6
| | | | | | stack garbage. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7149 dc483132-0cff-0310-8789-dd5450dbe970
* Changed token ID for KG_TOK_WRAP_MSG to match KG_TOK_SEAL_MSG bothTheodore Tso1995-12-012-1/+5
| | | | | | should be 0x0201. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7148 dc483132-0cff-0310-8789-dd5450dbe970
* * krb5_gss_glue.c (gss_inquire_names_for_mech): Added new contextTheodore Tso1995-12-013-2/+12
| | | | | | | | | argument to the call of krb5_gss_inquire_names_for_mech(). * inq_names.c (krb5_gss_inquire_names_for_mech): Added new context argument to the arg list. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7147 dc483132-0cff-0310-8789-dd5450dbe970
* Corrected algorithm description at beginning.Richard Basch1995-12-011-16/+26
| | | | | | | Fold input into 168 bits and then expand the result to include odd parity, so as to avoid potentially weakening the key. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7145 dc483132-0cff-0310-8789-dd5450dbe970
* Added 3-DES string translationRichard Basch1995-12-011-0/+3
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7144 dc483132-0cff-0310-8789-dd5450dbe970
* Corrected a bug in the wrap-around carry (found bug by comparing test resultsRichard Basch1995-11-291-24/+16
| | | | | | with another implementation). git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7141 dc483132-0cff-0310-8789-dd5450dbe970
* Make sure that each DES key is strong. If not, xor first byte with 0xf0Richard Basch1995-11-281-2/+8
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7140 dc483132-0cff-0310-8789-dd5450dbe970
* Corrected bit rotation to match documented algorithmRichard Basch1995-11-281-5/+6
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7139 dc483132-0cff-0310-8789-dd5450dbe970
* Removed debugging assert() statementRichard Basch1995-11-281-2/+0
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7138 dc483132-0cff-0310-8789-dd5450dbe970
* f_ecb.c, des_int.h (mit_des_ecb_encrypt): Add const declaration to inputEzra Peisach1995-11-283-2/+7
| | | | | | cblock. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7137 dc483132-0cff-0310-8789-dd5450dbe970
* The output block of n-fold should not be a "const"Richard Basch1995-11-281-1/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7136 dc483132-0cff-0310-8789-dd5450dbe970
* Compile 3-DES MD5 routineRichard Basch1995-11-281-0/+2
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7134 dc483132-0cff-0310-8789-dd5450dbe970
* Added 3-DES MD5 checksum mode switchRichard Basch1995-11-281-0/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7133 dc483132-0cff-0310-8789-dd5450dbe970
* Added 3-DES MD5 checksum modeRichard Basch1995-11-281-0/+11
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7132 dc483132-0cff-0310-8789-dd5450dbe970
* Added Triple-DES function prototypes and structuresRichard Basch1995-11-281-1/+56
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7131 dc483132-0cff-0310-8789-dd5450dbe970
* Compile in Triple-DES routinesRichard Basch1995-11-281-2/+13
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7130 dc483132-0cff-0310-8789-dd5450dbe970
* Triple DES shares the same random key initialization routineRichard Basch1995-11-281-0/+1
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7129 dc483132-0cff-0310-8789-dd5450dbe970
* Triple DES support routinesRichard Basch1995-11-281-0/+173
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7128 dc483132-0cff-0310-8789-dd5450dbe970
* Triple-DES support routinesRichard Basch1995-11-287-0/+637
| | | | git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7127 dc483132-0cff-0310-8789-dd5450dbe970
* * rc_dfl.c (krb5_rc_dfl_init): default lifespan toTom Yu1995-11-272-1/+8
| | | | | | | context->clockskew in case some app can't get at the internals of the context struct. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7125 dc483132-0cff-0310-8789-dd5450dbe970
* * preauth.c: Ultrix is broken. Prototype obtain_enc_ts_padata()Tom Yu1995-11-272-2/+41
| | | | | | | | and process_pw_salt() explicitly rather than using the typedef in k5-int.h becaus that typedef is to a function pointer now. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7123 dc483132-0cff-0310-8789-dd5450dbe970
* get_in_tkt.c (decrypt_as_reply):Theodore Tso1995-11-184-10/+22
| | | | | | | | | | | preauth.c (process_pw_salt): When fetching the key to decrypting the encrypted kdc reply, use the etype associated with the etype reply, not the etype associated with the included ticket. encode_kdc.c: Remove eblock argument from krb5_encode_kdc_rep; set the eblock type from the client_key's enctype. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7117 dc483132-0cff-0310-8789-dd5450dbe970