diff options
| author | Simo Sorce <simo@redhat.com> | 2015-04-23 14:51:00 -0400 |
|---|---|---|
| committer | Simo Sorce <simo@redhat.com> | 2015-04-23 14:51:00 -0400 |
| commit | b88a443caf2e96814fa831fa62fe2022bf0c8f08 (patch) | |
| tree | 098397f47598a8909a64b10cf1dd28b9e7fe7ec2 /src/mod_auth_gssapi.h | |
| parent | 98c182823c31529f70a8931dcdaf4c38db395d87 (diff) | |
| download | mod_auth_gssapi-b88a443caf2e96814fa831fa62fe2022bf0c8f08.tar.gz mod_auth_gssapi-b88a443caf2e96814fa831fa62fe2022bf0c8f08.tar.xz mod_auth_gssapi-b88a443caf2e96814fa831fa62fe2022bf0c8f08.zip | |
Revert "Use aes-256-gcm rather than aes-128-cbc"
This reverts commit e9c92795d87a316ea47f6bf37c9636e86eec57e7.
AESGCM is a neat idea but it is not really appropriate to be used in
mod_auth_gssapi because we cannot gurantee that the nonce will never be
reused. It is not very probable, and it is also not easy to force the
server to generate so many encyrpted sessions to have a good chance of
a collision that I know of, but better to avoid the whole issue, than
risk unforseen cases where it may happen.
Diffstat (limited to 'src/mod_auth_gssapi.h')
0 files changed, 0 insertions, 0 deletions