OpenAFS Master Repository branch, openafs-stable-1_6_x, updated. openafs-stable-1_6_4-14-g2f411f4
Gerrit Code Review
gerrit@openafs.org
Wed, 24 Jul 2013 08:12:25 -0700 (PDT)
The following commit has been merged in the openafs-stable-1_6_x branch:
commit 1c7fa1405940a136a992d65023cc690b1111ab3e
Author: Chaskiel Grundman <cg2v@andrew.cmu.edu>
Date: Sun Mar 17 21:58:47 2013 -0400
Derive DES/fcrypt session key from other key types
If a kerberos 5 ticket has a session key with a non-DES enctype,
use the NIST SP800-108 KDF in counter mode with HMAC_MD5 as the PRF to
construct a DES key to be used by rxkad.
To satisfy the requirements of the KDF, DES3 keys are first compressed into a
168 bit form by reversing the RFC3961 random-to-key algorithm
Change-Id: I4dc8e83a641f9892b31c109fb9025251de3dcb27
src/aklog/aklog.c | 14 ++-
src/rxkad/rxkad_prototypes.h | 6 ++
src/rxkad/ticket5.c | 198 +++++++++++++++++++++++++++++++++++++----
src/shlibafsrpc/libafsrpc.map | 1 +
4 files changed, 199 insertions(+), 20 deletions(-)
--
OpenAFS Master Repository