OpenAFS Master Repository branch, openafs-stable-1_4_x, updated. openafs-stable-1_4_14_1-156-g30922c5
Gerrit Code Review
gerrit@openafs.org
Wed, 24 Jul 2013 08:30:33 -0700 (PDT)
The following commit has been merged in the openafs-stable-1_4_x branch:
commit 443ee5d89f1bbee3b6b9e26748422a245925fff4
Author: Chaskiel Grundman <cg2v@andrew.cmu.edu>
Date: Sun Mar 17 21:58:47 2013 -0400
Derive DES/fcrypt session key from other key types
If a kerberos 5 ticket has a session key with a non-DES enctype,
use the NIST SP800-108 KDF in counter mode with HMAC_MD5 as the PRF to
construct a DES key to be used by rxkad.
To satisfy the requirements of the KDF, DES3 keys are first compressed into a
168 bit form by reversing the RFC3961 random-to-key algorithm
Change-Id: I4dc8e83a641f9892b31c109fb9025251de3dcb27
src/aklog/aklog_main.c | 12 ++-
src/rxkad/rxkad_prototypes.h | 6 ++
src/rxkad/ticket5.c | 197 ++++++++++++++++++++++++++++++++++++++----
src/shlibafsrpc/mapfile | 1 +
4 files changed, 196 insertions(+), 20 deletions(-)
--
OpenAFS Master Repository