1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
|
2004-02-24 Sam Hartman <hartmans@avalanche-breakdown.mit.edu>
* dk.h: As below.
* checksum.c dk_decrypt.c dk_encrypt.c: Remove ENCTYPE_LOCAL_DES3_HMAC_SHA1
2004-02-18 Ken Raeburn <raeburn@mit.edu>
* checksum.c, derive.c, dk_decrypt.c, dk_encrypt.c: Use ANSI C
style function definitions.
2004-02-13 Ken Raeburn <raeburn@mit.edu>
* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac): New argument
IVEC_MODE. If clear, same old behavior. If set, copy out next
to last block for CTS.
(krb5_dk_decrypt, krb5int_aes_dk_decrypt): Pass extra argument.
* dk_encrypt.c (krb5int_aes_dk_encrypt): For IV, copy out next to
last block for CTS.
2003-07-22 Ken Raeburn <raeburn@mit.edu>
* checksum.c (krb5_dk_make_checksum, krb5_marc_dk_make_checksum):
Use new numeric fields for key/bolck sizes instead of calling
functions.
* derive.c (krb5_derive_key, krb5_derive_random): Likewise.
* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac,
krb5_marc_dk_decrypt): Likewise.
* dk_encrypt.c (krb5_dk_encrypt_length, krb5_dk_encrypt,
krb5int_aes_encrypt_length, trunc_hmac, krb5int_aes_dk_encrypt,
krb5_marc_dk_encrypt_length, krb5_mark_dk_encrypt): Likewise.
* stringtokey.c (krb5int_dk_string_to_key): Likewise.
2003-07-17 Ken Raeburn <raeburn@mit.edu>
* Makefile.in (LIBNAME) [##WIN16##]: Don't define.
2003-04-17 Ken Raeburn <raeburn@mit.edu>
* dk_encrypt.c (krb5int_aes_dk_encrypt): Set output length
properly.
2003-04-13 Ken Raeburn <raeburn@mit.edu>
* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac): Renamed from
krb5_dk_decrypt, made static, added extra HMACSIZE argument to
indicate size of HMAC. Cast byte values to char to silence
compiler warning.
(krb5_dk_decrypt): Call it.
(krb5int_aes_dk_decrypt): New function.
* dk_encrypt.c (krb5_dk_encrypt): Cast byte values to char to
silence compiler warning.
(krb5int_aes_encrypt_length, trunc_hmac, krb5int_aes_dk_encrypt):
New functions.
* dk.h (krb5int_aes_encrypt_length, krb5int_aes_dk_encrypt,
krb5int_aes_dk_decrypt): Declare.
2003-03-04 Ken Raeburn <raeburn@mit.edu>
* stringtokey.c (krb5int_dk_string_to_key): Renamed from
krb5_... and added s2k-params argument.
* dk.h: Updated.
2003-01-10 Ken Raeburn <raeburn@mit.edu>
* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.
2002-08-29 Ken Raeburn <raeburn@mit.edu>
* Makefile.in: Revert $(S)=>/ change, for Windows support.
2002-08-23 Ken Raeburn <raeburn@mit.edu>
* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.
2001-10-09 Ken Raeburn <raeburn@mit.edu>
* dk.h: Make prototypes unconditional.
2001-06-21 Ken Raeburn <raeburn@mit.edu>
* derive.c: Include etypes.h.
(krb5_derive_random, krb5_random2key): New functions.
* checksum.c (krb5_dk_make_checksum): Cast 0x99 to char explicitly
to silence warnings.
2001-04-10 Ken Raeburn <raeburn@mit.edu>
* checksum.c (krb5_dk_make_checksum): Add casts when mixing
pointers with different target signedness.
* dk_decrypt.c (krb5_dk_decrypt): Likewise.
* stringtokey.c (krb5_dk_string_to_key): Likewise.
2001-03-05 Ken Raeburn <raeburn@mit.edu>
* checksum.c, derive.c, dk.h, dk_decrypt.c, dk_encrypt.c,
stringtokey.c: Use const instead of krb5_const.
2001-01-23 Ken Raeburn <raeburn@mit.edu>
* stringtokey.c (kerberos): Now const.
(krb5_dk_string_to_key): Cast it to non-const.
2000-06-03 Tom Yu <tlyu@mit.edu>
* dk_encrypt.c (krb5_dk_encrypt, krb5_marc_dk_encrypt): Chain
ivecs.
* dk_decrypt.c (krb5_dk_decrypt, krb5_marc_dk_decrypt): Chain
ivecs.
2000-04-28 Ken Raeburn <raeburn@mit.edu>
* derive.c (krb5_derive_key): If memory allocation fails, release
other allocated blocks before returning, instead of trying to
release them after returning.
2000-01-21 Ken Raeburn <raeburn@mit.edu>
* checksum.c (krb5_dk_make_checksum): enc_providers are now
const. Modify if(a=b) assignment/test constructs to silence gcc
warnings.
* dk_decrypt.c (krb5_dk_decrypt, krb5_marc_dk_decrypt): Ditto.
* dk_encrypt.c (krb5_dk_encrypt, krb5_marc_dk_encrypt): Ditto.
* stringtokey.c (krb5_dk_string_to_key): Ditto. Include dk.h.
1999-10-26 Wilfredo Sanchez <tritan@mit.edu>
* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
LOCAL_INCLUDES such that one can override CFLAGS from the command
line without losing CPP search patchs and defines. Some associated
Makefile cleanup.
1999-06-28 Tom Yu <tlyu@mit.edu>
* dk_encrypt.c (krb5_marc_dk_encrypt): Call
krb5_marc_dk_encrypt_length() instead of krb5_dk_encrypt_length()
to prevent blocksize errors.
Mon May 10 15:16:34 1999 Danilo Almeida <dalmeida@mit.edu>
* Makefile.in: Do win32 build in subdir.
Tue Jan 5 00:09:13 1999 Tom Yu <tlyu@mit.edu>
* dk.h: Add prototypes for krb5_marc_dk_*.
* dk_encrypt.c (krb5_marc_dk_encrypt): Add compat for 32-bit
length coded ciphertext.
* dk_decrypt.c (krb5_marc_dk_decrypt): Add compat for 32-bit
length coded ciphertext.
* checksum.c: Add compat for 32-bit length included checksum.
Note that nothing uses this at the moment, and probably
shouldn't.
1998-11-13 Theodore Ts'o <tytso@rsts-11.mit.edu>
* Makefile.in: Set the myfulldir and mydir variables (which are
relative to buildtop and thisconfigdir, respectively.)
|
