[prev in list] [next in list] [prev in thread] [next in thread] 

List:       krb5-bugs
Subject:    [krbdev.mit.edu #6665] SVN Commit
From:       "Tom Yu via RT" <rt-comment () krbdev ! mit ! edu>
Date:       2010-02-23 0:25:52
Message-ID: rt-6665-32514.8.80881432054842 () krbdev ! mit ! edu
[Download RAW message or body]


pull up r23734 from trunk

 ------------------------------------------------------------------------
 r23734 | ghudson | 2010-02-18 13:04:47 -0500 (Thu, 18 Feb 2010) | 17 lines

 ticket: 6665
 subject: Fix cipher state chaining in OpenSSL back end
 target_version: 1.8
 tags: pullup

 Make cipher state chaining work in the OpenSSL back end for des, des3,
 and arcfour enc providers.  Subtleties:

 * DES and DES3 have checks to avoid clobbering ivec with uninitialized
   data if there is no data to encrypt.
 * Arcfour saves the OpenSSL cipher context across calls.  To protect
   against a caller improperly copying the state (which happens to work
   with other enc providers), a loopback pointer is used, as in GSSAPI.
 * EVP_EncryptFinal_ex is unnecessary with stream ciphers and would
   interfere with cipher state chaining if it did anything, so just
   remove it.

http://src.mit.edu/fisheye/changelog/krb5/?cs=23746
Commit By: tlyu
Revision: 23746
Changed Files:
U   branches/krb5-1-8/src/lib/crypto/openssl/enc_provider/des.c
U   branches/krb5-1-8/src/lib/crypto/openssl/enc_provider/des3.c
U   branches/krb5-1-8/src/lib/crypto/openssl/enc_provider/rc4.c

_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
[prev in list] [next in list] [prev in thread] [next in thread]