[OpenAFS] rx + k5 + !des = rxk5
Marcus Watts
mdw@umich.edu
Mon, 06 Jun 2005 18:12:12 -0400
I've updated rxk5
http://www.umich.edu/~mdw/rxk5-12.tgz
/afs/umich.edu/user/m/d/mdw/Public/html/rxk5-12.tgz
The largest change is support for shishi and heimdal.
The only "security" fix is a check for range on padding.
Heimdal is the preferable library to use with this.
Shishi is "alpha" and GPL. Interestingly, the changes to support
shishi weren't much worse than to support heimdal.
The only "private" mit k5 dependency that I can't easily eliminate is
krb5_decrypt_tkt_part. See the README for more information. I hope
the kerberos maintainers will reconsider their decision to make that
private. Meanwhile, I can't recommend the use of mit k5 with rxk5.
Note that two other open source k5 libraries do not have this problem.
-Marcus Watts