From noreply at github.com  Tue Dec  1 04:29:18 2015
From: noreply at github.com (GitHub)
Date: Mon, 30 Nov 2015 19:29:18 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 94d548: refactor,
	use Key pointer
Message-ID: <565d140e81b11_50aa3fa28649f29c1000f9@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 94d5486bd41e97acc5331959d1b88e5896f858e5
      https://github.com/heimdal/heimdal/commit/94d5486bd41e97acc5331959d1b88e5896f858e5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  refactor, use Key pointer


  Commit: 249528762b011db2f8b727f3433de0015b7ab424
      https://github.com/heimdal/heimdal/commit/249528762b011db2f8b727f3433de0015b7ab424
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  check krb5_get_pw_salt return value


  Commit: a4dcbe622f77a06bf3a2a98f39d52c173f564239
      https://github.com/heimdal/heimdal/commit/a4dcbe622f77a06bf3a2a98f39d52c173f564239
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M lib/hdb/Makefile.am
    M lib/hdb/keys.c
    M lib/krb5/crypto.c
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  SP800-132 requires random salt of at least 128 bits


Compare: https://github.com/heimdal/heimdal/compare/86f58807ea12...a4dcbe622f77

From noreply at github.com  Tue Dec  1 04:41:48 2015
From: noreply at github.com (GitHub)
Date: Mon, 30 Nov 2015 19:41:48 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] a5b017: use ASCII salt
 instead, not allowed by ETYPE-INFO2
Message-ID: <565d16fc59764_73ce3f8e4e29b2bc5879@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: a5b01721d602acdd7f12be1e25caf342d6d18df9
      https://github.com/heimdal/heimdal/commit/a5b01721d602acdd7f12be1e25caf342d6d18df9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M lib/hdb/Makefile.am
    M lib/hdb/keys.c

  Log Message:
  -----------
  use ASCII salt instead, not allowed by ETYPE-INFO2



From noreply at github.com  Tue Dec  1 04:43:14 2015
From: noreply at github.com (GitHub)
Date: Mon, 30 Nov 2015 19:43:14 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 50cf33: initial cut of
 draft-ietf-kitten-aes-cts-hmac-sha2...
Message-ID: <565d1752edc27_5be73f8ea7b552a01437e3@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 50cf33af718a0aa89455c0afb4dfc6d3d5832238
      https://github.com/heimdal/heimdal/commit/50cf33af718a0aa89455c0afb4dfc6d3d5832238
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M kdc/connect.c
    M kdc/kerberos5.c
    M lib/asn1/krb5.asn1
    M lib/hcrypto/evp-cc.c
    M lib/hcrypto/evp-cc.h
    M lib/hcrypto/evp.h
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/pkcs5.c
    M lib/hcrypto/test_pkcs5.c
    M lib/hcrypto/version-script.map
    M lib/krb5/Makefile.am
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-sha1.c
    A lib/krb5/crypto-aes-sha2.c
    R lib/krb5/crypto-aes.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/derived-key-test.c
    M lib/krb5/krb5.h
    M lib/krb5/libkrb5-exports.def.in
    A lib/krb5/salt-aes-sha1.c
    A lib/krb5/salt-aes-sha2.c
    R lib/krb5/salt-aes.c
    A lib/krb5/sp800-108-kdf.c
    M lib/krb5/test_crypto.c
    M lib/krb5/test_crypto_wrapping.c
    M lib/krb5/test_rfc3961.c
    M lib/krb5/version-script.map

  Log Message:
  -----------
  initial cut of draft-ietf-kitten-aes-cts-hmac-sha2-06


  Commit: 32202b87342ef3c065487ab3875f401e93c052b2
      https://github.com/heimdal/heimdal/commit/32202b87342ef3c065487ab3875f401e93c052b2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  In draft -07, PRF will be untruncated HMAC


  Commit: 355ac7be826389f0a16a7eb3c7e2ddae7f0f760b
      https://github.com/heimdal/heimdal/commit/355ac7be826389f0a16a7eb3c7e2ddae7f0f760b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  refactor, use Key pointer


  Commit: da2a83f0f0a0bdfefc6661c6566017e1cd5a7792
      https://github.com/heimdal/heimdal/commit/da2a83f0f0a0bdfefc6661c6566017e1cd5a7792
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  check krb5_get_pw_salt return value


  Commit: daa4c36d55992bd7d352a70ccd32e52c9af2e53e
      https://github.com/heimdal/heimdal/commit/daa4c36d55992bd7d352a70ccd32e52c9af2e53e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c
    M lib/krb5/crypto.c
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  SP800-132 requires random salt of at least 128 bits


Compare: https://github.com/heimdal/heimdal/compare/a5b01721d602...daa4c36d5599

From noreply at github.com  Tue Dec  1 06:14:13 2015
From: noreply at github.com (GitHub)
Date: Mon, 30 Nov 2015 21:14:13 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 7ce67c: Fix warning,
 _hdb_find_master_key should take int ...
Message-ID: <565d2ca54e96_244f3fc0d6a5f2b8111921@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 7ce67cea502e510994b1b52cb402c5497bc7246d
      https://github.com/heimdal/heimdal/commit/7ce67cea502e510994b1b52cb402c5497bc7246d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-01 (Tue, 01 Dec 2015)

  Changed paths:
    M lib/hdb/mkey.c

  Log Message:
  -----------
  Fix warning, _hdb_find_master_key should take int *



From noreply at github.com  Fri Dec  4 04:06:29 2015
From: noreply at github.com (GitHub)
Date: Thu, 03 Dec 2015 19:06:29 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 343198:
 draft-ietf-kitten-aes-cts-hmac-sha2-07 enc tests
Message-ID: <5661033529576_470b3f9f753472a02893cd@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 3431989b63d2b68659a2c67e3a50be32d2d29e66
      https://github.com/heimdal/heimdal/commit/3431989b63d2b68659a2c67e3a50be32d2d29e66
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 enc tests


  Commit: 62de248350714b213cd16fa3878611c53c89ca3d
      https://github.com/heimdal/heimdal/commit/62de248350714b213cd16fa3878611c53c89ca3d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/pseudo-random-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 PRF test


  Commit: d52d8016c0289e8a9667bcca1fddf51dc64bbef9
      https://github.com/heimdal/heimdal/commit/d52d8016c0289e8a9667bcca1fddf51dc64bbef9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 checksum tests


  Commit: ae6c6a232e58abc84ead11dcc6594c52fe74f951
      https://github.com/heimdal/heimdal/commit/ae6c6a232e58abc84ead11dcc6594c52fe74f951
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/krb5/derived-key-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 derived key test


  Commit: 78ebcd99cf6e0dc7103a84cf99dd982f243474a6
      https://github.com/heimdal/heimdal/commit/78ebcd99cf6e0dc7103a84cf99dd982f243474a6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  updates for draft-ietf-kitten-aes-cts-hmac-sha2-07


Compare: https://github.com/heimdal/heimdal/compare/7ce67cea502e...78ebcd99cf6e

From noreply at github.com  Fri Dec  4 05:12:37 2015
From: noreply at github.com (GitHub)
Date: Thu, 03 Dec 2015 20:12:37 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] dd65b3: use
	_krb5_sha2_md_for_enctype in string2key
Message-ID: <566112b5ea527_9413fe69bc6129c138026@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: dd65b369ccc0011f6eed1aa82b36820cc42a59ee
      https://github.com/heimdal/heimdal/commit/dd65b369ccc0011f6eed1aa82b36820cc42a59ee
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/krb5/salt-aes-sha2.c

  Log Message:
  -----------
  use _krb5_sha2_md_for_enctype in string2key



From noreply at github.com  Fri Dec  4 05:36:32 2015
From: noreply at github.com (GitHub)
Date: Thu, 03 Dec 2015 20:36:32 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] c2ec30:
 s/_krb5_sha2_md_for_enctype/_krb5_aes_sha2_md_for_...
Message-ID: <566118505c025_6e593ff318fe329c26847@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: c2ec3054b5a78b6e81717ec0e82c0c4023756681
      https://github.com/heimdal/heimdal/commit/c2ec3054b5a78b6e81717ec0e82c0c4023756681
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/salt-aes-sha2.c

  Log Message:
  -----------
  s/_krb5_sha2_md_for_enctype/_krb5_aes_sha2_md_for_enctype



From noreply at github.com  Fri Dec  4 13:56:52 2015
From: noreply at github.com (GitHub)
Date: Fri, 04 Dec 2015 04:56:52 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 93725f: Fix broken CFB8
 implementation, use CC for CFB8
Message-ID: <56618d946962e_75833faa508db2bc1494e5@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/cfb8
  Home:   https://github.com/heimdal/heimdal
  Commit: 93725f01f0ff4b98f095b6d8f286e8ac306cc232
      https://github.com/heimdal/heimdal/commit/93725f01f0ff4b98f095b6d8f286e8ac306cc232
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/hcrypto/evp-cc.c

  Log Message:
  -----------
  Fix broken CFB8 implementation, use CC for CFB8


  Commit: 4f9cc8feeab1aab322ced6c3fb00ec547ac3f99b
      https://github.com/heimdal/heimdal/commit/4f9cc8feeab1aab322ced6c3fb00ec547ac3f99b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/hcrypto/evp-cc.c
    M lib/hcrypto/evp-cc.h

  Log Message:
  -----------
  add CommonCrypto support for SHA-384 and SHA-512


Compare: https://github.com/heimdal/heimdal/compare/22b267fa232a...4f9cc8feeab1

From noreply at github.com  Fri Dec  4 13:59:49 2015
From: noreply at github.com (GitHub)
Date: Fri, 04 Dec 2015 04:59:49 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 93725f: Fix broken CFB8
 implementation, use CC for CFB8
Message-ID: <56618e45a89ac_3143f8981dc52b8104855@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 93725f01f0ff4b98f095b6d8f286e8ac306cc232
      https://github.com/heimdal/heimdal/commit/93725f01f0ff4b98f095b6d8f286e8ac306cc232
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/hcrypto/evp-cc.c

  Log Message:
  -----------
  Fix broken CFB8 implementation, use CC for CFB8


  Commit: 4f9cc8feeab1aab322ced6c3fb00ec547ac3f99b
      https://github.com/heimdal/heimdal/commit/4f9cc8feeab1aab322ced6c3fb00ec547ac3f99b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/hcrypto/evp-cc.c
    M lib/hcrypto/evp-cc.h

  Log Message:
  -----------
  add CommonCrypto support for SHA-384 and SHA-512


  Commit: 5ae1ab038c3c7d41082069d83f835078f59f68a4
      https://github.com/heimdal/heimdal/commit/5ae1ab038c3c7d41082069d83f835078f59f68a4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-04 (Fri, 04 Dec 2015)

  Changed paths:
    M lib/hcrypto/evp-cc.c
    M lib/hcrypto/evp-cc.h

  Log Message:
  -----------
  Merge pull request #121 from heimdal/lukeh/cfb8

Merging support for CFB8 in CommonCrypto (note will break support for OS X older than 10.7). CommonCrypto support for SHA-256/384 also added.


Compare: https://github.com/heimdal/heimdal/compare/2cac8ca70399...5ae1ab038c3c

From noreply at github.com  Fri Dec  4 14:00:49 2015
From: noreply at github.com (GitHub)
Date: Fri, 04 Dec 2015 05:00:49 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal]
Message-ID: <56618e81d0af8_395c3fe2aa9052a087814@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/cfb8
  Home:   https://github.com/heimdal/heimdal

From noreply at github.com  Fri Dec  4 14:02:32 2015
From: noreply at github.com (GitHub)
Date: Fri, 04 Dec 2015 05:02:32 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] f8ae21: initial cut of
 draft-ietf-kitten-aes-cts-hmac-sha2...
Message-ID: <56618ee8ec799_2f373ffabd5bd2c09353e@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: f8ae211cfbde3d7c87b9888ab5108eb560408cba
      https://github.com/heimdal/heimdal/commit/f8ae211cfbde3d7c87b9888ab5108eb560408cba
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M kdc/connect.c
    M kdc/kerberos5.c
    M lib/asn1/krb5.asn1
    M lib/hcrypto/evp.h
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/pkcs5.c
    M lib/hcrypto/test_pkcs5.c
    M lib/hcrypto/version-script.map
    M lib/krb5/Makefile.am
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-sha1.c
    A lib/krb5/crypto-aes-sha2.c
    R lib/krb5/crypto-aes.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/derived-key-test.c
    M lib/krb5/krb5.h
    M lib/krb5/libkrb5-exports.def.in
    A lib/krb5/salt-aes-sha1.c
    A lib/krb5/salt-aes-sha2.c
    R lib/krb5/salt-aes.c
    A lib/krb5/sp800-108-kdf.c
    M lib/krb5/test_crypto.c
    M lib/krb5/test_crypto_wrapping.c
    M lib/krb5/test_rfc3961.c
    M lib/krb5/version-script.map

  Log Message:
  -----------
  initial cut of draft-ietf-kitten-aes-cts-hmac-sha2-06


  Commit: 06851af5603ffe0ba811143496e7293404ef807c
      https://github.com/heimdal/heimdal/commit/06851af5603ffe0ba811143496e7293404ef807c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  In draft -07, PRF will be untruncated HMAC


  Commit: d23ff3c76def1d537815a6353ebe6dc7b0779535
      https://github.com/heimdal/heimdal/commit/d23ff3c76def1d537815a6353ebe6dc7b0779535
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  refactor, use Key pointer


  Commit: 9c52630c0e3f040291cbaf81034da7211b8ef751
      https://github.com/heimdal/heimdal/commit/9c52630c0e3f040291cbaf81034da7211b8ef751
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  check krb5_get_pw_salt return value


  Commit: 7046072832cd891d5436a10f3fc0f1597c10a9df
      https://github.com/heimdal/heimdal/commit/7046072832cd891d5436a10f3fc0f1597c10a9df
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c
    M lib/krb5/crypto.c
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  SP800-132 requires random salt of at least 128 bits


  Commit: 9647e12fc046c9b531d14ea5a36251883fa71cbf
      https://github.com/heimdal/heimdal/commit/9647e12fc046c9b531d14ea5a36251883fa71cbf
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hdb/mkey.c

  Log Message:
  -----------
  Fix warning, _hdb_find_master_key should take int *


  Commit: bb6cec6299f24c303ac83e5e6c1924f2448100e0
      https://github.com/heimdal/heimdal/commit/bb6cec6299f24c303ac83e5e6c1924f2448100e0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 enc tests


  Commit: 0defd7d709f9ae61dc87b80405780c0d518ac2a6
      https://github.com/heimdal/heimdal/commit/0defd7d709f9ae61dc87b80405780c0d518ac2a6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/pseudo-random-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 PRF test


  Commit: f273849f8b0dbb4818a2a9d3c67b91c905f92455
      https://github.com/heimdal/heimdal/commit/f273849f8b0dbb4818a2a9d3c67b91c905f92455
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 checksum tests


  Commit: cc31f52e061eddc3796ba3ed727d452d3c9f132a
      https://github.com/heimdal/heimdal/commit/cc31f52e061eddc3796ba3ed727d452d3c9f132a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/derived-key-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 derived key test


  Commit: 5c652f7894d927a74244ea9dbdb43b8ff0d52e32
      https://github.com/heimdal/heimdal/commit/5c652f7894d927a74244ea9dbdb43b8ff0d52e32
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  updates for draft-ietf-kitten-aes-cts-hmac-sha2-07


  Commit: 3ceed6da12290b86f2a78a4311e50b82d4421991
      https://github.com/heimdal/heimdal/commit/3ceed6da12290b86f2a78a4311e50b82d4421991
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/salt-aes-sha2.c

  Log Message:
  -----------
  use _krb5_sha2_md_for_enctype in string2key


  Commit: f670b0a1fc637fc652a9ae7055f029f5223a32cb
      https://github.com/heimdal/heimdal/commit/f670b0a1fc637fc652a9ae7055f029f5223a32cb
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/salt-aes-sha2.c

  Log Message:
  -----------
  s/_krb5_sha2_md_for_enctype/_krb5_aes_sha2_md_for_enctype


Compare: https://github.com/heimdal/heimdal/compare/c2ec3054b5a7...f670b0a1fc63

From noreply at github.com  Fri Dec  4 14:06:02 2015
From: noreply at github.com (GitHub)
Date: Fri, 04 Dec 2015 05:06:02 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 87c59d: export
 CommonCrypto SHA-384/512 implementations
Message-ID: <56618fbadca8f_35f3f849152d2bc129061@hookshot-fe4-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 87c59d1db211f2b7faa906a9ff4dbff0526bfc6a
      https://github.com/heimdal/heimdal/commit/87c59d1db211f2b7faa906a9ff4dbff0526bfc6a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/version-script.map

  Log Message:
  -----------
  export CommonCrypto SHA-384/512 implementations


  Commit: 9aeb08173a8db6fd48f60b664bccb07e1b6f1648
      https://github.com/heimdal/heimdal/commit/9aeb08173a8db6fd48f60b664bccb07e1b6f1648
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hcrypto/test_bulk.c

  Log Message:
  -----------
  add CommonCrypto SHA-384/512 to test_bulk


Compare: https://github.com/heimdal/heimdal/compare/5ae1ab038c3c...9aeb08173a8d

From noreply at github.com  Fri Dec  4 14:06:29 2015
From: noreply at github.com (GitHub)
Date: Fri, 04 Dec 2015 05:06:29 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 6012bf: initial cut of
 draft-ietf-kitten-aes-cts-hmac-sha2...
Message-ID: <56618fd52857e_d8b3fd2b15e329c791cd@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 6012bf2132b275388317ab8fe8af8076b7c54528
      https://github.com/heimdal/heimdal/commit/6012bf2132b275388317ab8fe8af8076b7c54528
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M kdc/connect.c
    M kdc/kerberos5.c
    M lib/asn1/krb5.asn1
    M lib/hcrypto/evp.h
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/pkcs5.c
    M lib/hcrypto/test_pkcs5.c
    M lib/hcrypto/version-script.map
    M lib/krb5/Makefile.am
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-sha1.c
    A lib/krb5/crypto-aes-sha2.c
    R lib/krb5/crypto-aes.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/derived-key-test.c
    M lib/krb5/krb5.h
    M lib/krb5/libkrb5-exports.def.in
    A lib/krb5/salt-aes-sha1.c
    A lib/krb5/salt-aes-sha2.c
    R lib/krb5/salt-aes.c
    A lib/krb5/sp800-108-kdf.c
    M lib/krb5/test_crypto.c
    M lib/krb5/test_crypto_wrapping.c
    M lib/krb5/test_rfc3961.c
    M lib/krb5/version-script.map

  Log Message:
  -----------
  initial cut of draft-ietf-kitten-aes-cts-hmac-sha2-06


  Commit: c7bdc5510e1688b3e5894ae8abc37b64666e16b5
      https://github.com/heimdal/heimdal/commit/c7bdc5510e1688b3e5894ae8abc37b64666e16b5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  In draft -07, PRF will be untruncated HMAC


  Commit: ce4f09ecb3da5652d83a9529b1c2c64edb007c3b
      https://github.com/heimdal/heimdal/commit/ce4f09ecb3da5652d83a9529b1c2c64edb007c3b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  refactor, use Key pointer


  Commit: 7ca82c614f29e3ff54eb55a3141b4e64d7a2490d
      https://github.com/heimdal/heimdal/commit/7ca82c614f29e3ff54eb55a3141b4e64d7a2490d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  check krb5_get_pw_salt return value


  Commit: 7c113dc8cd512c209679f168c57cdce1e90b9b54
      https://github.com/heimdal/heimdal/commit/7c113dc8cd512c209679f168c57cdce1e90b9b54
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c
    M lib/krb5/crypto.c
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  SP800-132 requires random salt of at least 128 bits


  Commit: fbd6671ca97cd026b74e3b1891492041d7120d9b
      https://github.com/heimdal/heimdal/commit/fbd6671ca97cd026b74e3b1891492041d7120d9b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hdb/mkey.c

  Log Message:
  -----------
  Fix warning, _hdb_find_master_key should take int *


  Commit: 072a688d696f8c83055d8fd1a598cb483ebdc0d9
      https://github.com/heimdal/heimdal/commit/072a688d696f8c83055d8fd1a598cb483ebdc0d9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 enc tests


  Commit: dded2d1d086467d424f635f6b2af8add3b1004b4
      https://github.com/heimdal/heimdal/commit/dded2d1d086467d424f635f6b2af8add3b1004b4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/pseudo-random-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 PRF test


  Commit: 8f819243149da5647fca08ffd466772c7c1f79d2
      https://github.com/heimdal/heimdal/commit/8f819243149da5647fca08ffd466772c7c1f79d2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 checksum tests


  Commit: 0726e1d60f4c5dd5ce0d279d389e69e96477bead
      https://github.com/heimdal/heimdal/commit/0726e1d60f4c5dd5ce0d279d389e69e96477bead
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/derived-key-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 derived key test


  Commit: 2409536327dc720cced1cd8b1db3410725911efe
      https://github.com/heimdal/heimdal/commit/2409536327dc720cced1cd8b1db3410725911efe
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  updates for draft-ietf-kitten-aes-cts-hmac-sha2-07


  Commit: 84f2fdfda4e70e1b59a5a4ecce9cb816c2773fbf
      https://github.com/heimdal/heimdal/commit/84f2fdfda4e70e1b59a5a4ecce9cb816c2773fbf
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/salt-aes-sha2.c

  Log Message:
  -----------
  use _krb5_sha2_md_for_enctype in string2key


  Commit: 69e5acaa5e8204b39af430c92b3a10fe8a724244
      https://github.com/heimdal/heimdal/commit/69e5acaa5e8204b39af430c92b3a10fe8a724244
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/salt-aes-sha2.c

  Log Message:
  -----------
  s/_krb5_sha2_md_for_enctype/_krb5_aes_sha2_md_for_enctype


Compare: https://github.com/heimdal/heimdal/compare/f670b0a1fc63...69e5acaa5e82

From noreply at github.com  Sat Dec  5 00:33:56 2015
From: noreply at github.com (GitHub)
Date: Fri, 04 Dec 2015 15:33:56 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] b8119c: use memset_s
Message-ID: <566222e41c06a_3a9b3f97e60192b81494ef@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/hcrypto-memset_s
  Home:   https://github.com/heimdal/heimdal
  Commit: b8119c2b67a6203d052830a6c2eab4936e73bbec
      https://github.com/heimdal/heimdal/commit/b8119c2b67a6203d052830a6c2eab4936e73bbec
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-05 (Sat, 05 Dec 2015)

  Changed paths:
    M lib/hcrypto/bn.c
    M lib/hcrypto/dh.c
    M lib/hcrypto/dsa.c
    M lib/hcrypto/engine.c
    M lib/hcrypto/evp.c
    M lib/hcrypto/hmac.c
    M lib/hcrypto/rsa.c

  Log Message:
  -----------
  use memset_s



From noreply at github.com  Sun Dec  6 02:33:01 2015
From: noreply at github.com (GitHub)
Date: Sat, 05 Dec 2015 17:33:01 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] b504fc: OpenSSL compat:
 HMAC() takes unsigned char buffer
Message-ID: <5663904da1cfb_244f3fc0d6a5f2b8208982@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: b504fc828ceb0d0dcaf3b4dc9fc89bd654696408
      https://github.com/heimdal/heimdal/commit/b504fc828ceb0d0dcaf3b4dc9fc89bd654696408
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  OpenSSL compat: HMAC() takes unsigned char buffer



From noreply at github.com  Sun Dec  6 03:02:20 2015
From: noreply at github.com (GitHub)
Date: Sat, 05 Dec 2015 18:02:20 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 8d94a8: conform
 NTMakefile to Makefile.am for aes-sha2
Message-ID: <5663972ca5522_40ad3fd1246452a01480f5@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 8d94a8bceb6b7776f651d50ab4ee9c8def24ca59
      https://github.com/heimdal/heimdal/commit/8d94a8bceb6b7776f651d50ab4ee9c8def24ca59
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/NTMakefile

  Log Message:
  -----------
  conform NTMakefile to Makefile.am for aes-sha2



From noreply at github.com  Sun Dec  6 03:08:01 2015
From: noreply at github.com (GitHub)
Date: Sat, 05 Dec 2015 18:08:01 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] c700e1: use
 KRB5_PROG_ETYPE_NOSUPP, not KRB5_BAD_ENCTYPE
Message-ID: <56639881742c1_4ba03fdf61f552a01558c@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: c700e1526848ab05c43b5b83047f798e7ab319ac
      https://github.com/heimdal/heimdal/commit/c700e1526848ab05c43b5b83047f798e7ab319ac
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  use KRB5_PROG_ETYPE_NOSUPP, not KRB5_BAD_ENCTYPE



From noreply at github.com  Sun Dec  6 05:54:39 2015
From: noreply at github.com (GitHub)
Date: Sat, 05 Dec 2015 20:54:39 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 596a04: fix
	search/replace typos
Message-ID: <5663bf8fe7eb5_122e3fe1f4efd2b843785@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 596a0432197117796b9807f2dc81e2d8c56408a2
      https://github.com/heimdal/heimdal/commit/596a0432197117796b9807f2dc81e2d8c56408a2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix search/replace typos



From noreply at github.com  Mon Dec  7 09:42:25 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 00:42:25 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] bff3b2: do SP800
	calculation in bytes, not bits
Message-ID: <566546717ab7e_76a33fd3a04672c0965d1@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: bff3b2dd05a605c0cad40efdfa620d3bbf71c29c
      https://github.com/heimdal/heimdal/commit/bff3b2dd05a605c0cad40efdfa620d3bbf71c29c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  do SP800 calculation in bytes, not bits


  Commit: 0d17a7b38be3e951c396a7a56c736bf6e67bd41f
      https://github.com/heimdal/heimdal/commit/0d17a7b38be3e951c396a7a56c736bf6e67bd41f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: 49df8531db3b460479a924fb866e7b72afdacbc2
      https://github.com/heimdal/heimdal/commit/49df8531db3b460479a924fb866e7b72afdacbc2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: 10ec6f1d9f7e23a85737ca908b51523be9895d24
      https://github.com/heimdal/heimdal/commit/10ec6f1d9f7e23a85737ca908b51523be9895d24
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: 41d662e7fd0f25bb687247497a4ca8294307d740
      https://github.com/heimdal/heimdal/commit/41d662e7fd0f25bb687247497a4ca8294307d740
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: 5707e620e3bf18d38706407cfe2a73d7830afe62
      https://github.com/heimdal/heimdal/commit/5707e620e3bf18d38706407cfe2a73d7830afe62
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: b4f685588f287e02897773c97536cc80f51ae03e
      https://github.com/heimdal/heimdal/commit/b4f685588f287e02897773c97536cc80f51ae03e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: 42041aea8120c1db6666674af5d929df9142de0c
      https://github.com/heimdal/heimdal/commit/42041aea8120c1db6666674af5d929df9142de0c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: 6943b167389c1590c676949e86d39ccfe9ef0fed
      https://github.com/heimdal/heimdal/commit/6943b167389c1590c676949e86d39ccfe9ef0fed
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: 654ac062277bd6444262a270b5e379d0d90862cc
      https://github.com/heimdal/heimdal/commit/654ac062277bd6444262a270b5e379d0d90862cc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: f8732945512cf7aefe1c5735bbeb0300a36bd7ff
      https://github.com/heimdal/heimdal/commit/f8732945512cf7aefe1c5735bbeb0300a36bd7ff
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  gss fluff


  Commit: 44a5ef8f895d8ed982482aee6420e9057c3767f1
      https://github.com/heimdal/heimdal/commit/44a5ef8f895d8ed982482aee6420e9057c3767f1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: f6e4a40fc9f43331e9f94c85fd8aee34fd5cb35b
      https://github.com/heimdal/heimdal/commit/f6e4a40fc9f43331e9f94c85fd8aee34fd5cb35b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: b6084652d90dc01bfe99312905e85001561341ec
      https://github.com/heimdal/heimdal/commit/b6084652d90dc01bfe99312905e85001561341ec
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: 85691a86b9bc9b08db53ed7a0ce8e46a002bd159
      https://github.com/heimdal/heimdal/commit/85691a86b9bc9b08db53ed7a0ce8e46a002bd159
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: 1107944dd10866ede746c54b4dad0dd2737bdfe1
      https://github.com/heimdal/heimdal/commit/1107944dd10866ede746c54b4dad0dd2737bdfe1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: 9dfd282e7fb98cf5247e2cba9661da534bb1ddbf
      https://github.com/heimdal/heimdal/commit/9dfd282e7fb98cf5247e2cba9661da534bb1ddbf
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: 5235c8f679481cf7ae613a1a1821f939bbe39cfe
      https://github.com/heimdal/heimdal/commit/5235c8f679481cf7ae613a1a1821f939bbe39cfe
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: c74d64f46ee50602c4e582a768723ba8d2a95b35
      https://github.com/heimdal/heimdal/commit/c74d64f46ee50602c4e582a768723ba8d2a95b35
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: e2ee1d728629ffc8756c9dd9d2ff23e229f3b1e3
      https://github.com/heimdal/heimdal/commit/e2ee1d728629ffc8756c9dd9d2ff23e229f3b1e3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: f5981e550980082441e69b0436c9efefc711bdc7
      https://github.com/heimdal/heimdal/commit/f5981e550980082441e69b0436c9efefc711bdc7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: 15c04ddca821eeac68d5f923cd3bf809ca999292
      https://github.com/heimdal/heimdal/commit/15c04ddca821eeac68d5f923cd3bf809ca999292
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: e4d8ec03ef0f7127bacd9d9d33e0aae69ae0d372
      https://github.com/heimdal/heimdal/commit/e4d8ec03ef0f7127bacd9d9d33e0aae69ae0d372
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


Compare: https://github.com/heimdal/heimdal/compare/bff3b2dd05a6^...e4d8ec03ef0f

From noreply at github.com  Mon Dec  7 09:45:23 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 00:45:23 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] bff3b2: do SP800
	calculation in bytes, not bits
Message-ID: <56654723d05c_286d3f97cbe8d29c810ad@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: bff3b2dd05a605c0cad40efdfa620d3bbf71c29c
      https://github.com/heimdal/heimdal/commit/bff3b2dd05a605c0cad40efdfa620d3bbf71c29c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-06 (Sun, 06 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  do SP800 calculation in bytes, not bits



From noreply at github.com  Mon Dec  7 09:50:54 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 00:50:54 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 28458e: export
	_krb5_enctype_is_aead
Message-ID: <5665486ee122f_d8b3fd2b15e329c9815@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 28458e4b1b6bba3a575cf915c7aae7a088289d42
      https://github.com/heimdal/heimdal/commit/28458e4b1b6bba3a575cf915c7aae7a088289d42
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead



From noreply at github.com  Mon Dec  7 10:17:58 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 01:17:58 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 756809: remove GCM test
	for now
Message-ID: <56654ec64ccf3_1ce63fa77a7bd2a0224726@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 7568094080d39b23d47883ca0973afac4e9ab9a9
      https://github.com/heimdal/heimdal/commit/7568094080d39b23d47883ca0973afac4e9ab9a9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: d907be7a3e264934efdf728a5c8aa4d25d296331
      https://github.com/heimdal/heimdal/commit/d907be7a3e264934efdf728a5c8aa4d25d296331
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: 17fb9401752e8aaf9c9f5701311bfe2c27417656
      https://github.com/heimdal/heimdal/commit/17fb9401752e8aaf9c9f5701311bfe2c27417656
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


Compare: https://github.com/heimdal/heimdal/compare/28458e4b1b6b...17fb9401752e

From noreply at github.com  Mon Dec  7 11:52:53 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 02:52:53 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] ae2adf: actually remove
	_gsskrb5cfx_wrap_length_cfx
Message-ID: <566565055e948_1ca53fadb36b12a036754@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: ae2adf20ecb7ea9f18fd6a2ff8a8f7f532dfe842
      https://github.com/heimdal/heimdal/commit/ae2adf20ecb7ea9f18fd6a2ff8a8f7f532dfe842
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx



From noreply at github.com  Mon Dec  7 12:09:54 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 03:09:54 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 575f97: remove trailing
	whitespace
Message-ID: <566569022a53d_b173fdbe8ee92c026351a@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 575f97cfb313b5c5ec0719afea18385d599cdba6
      https://github.com/heimdal/heimdal/commit/575f97cfb313b5c5ec0719afea18385d599cdba6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: 5940b311417e54cbb1200ec16d9a4de48f506c3d
      https://github.com/heimdal/heimdal/commit/5940b311417e54cbb1200ec16d9a4de48f506c3d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: a07deb2d326650b6961813ad792b655e58a13614
      https://github.com/heimdal/heimdal/commit/a07deb2d326650b6961813ad792b655e58a13614
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  rename back to _krb5_SP800_108_KDF


  Commit: e00ad19219a78184a31b4877c8faa71c06b3bd51
      https://github.com/heimdal/heimdal/commit/e00ad19219a78184a31b4877c8faa71c06b3bd51
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: 65b7839864b774cdc9d7d5d462701f61916d2405
      https://github.com/heimdal/heimdal/commit/65b7839864b774cdc9d7d5d462701f61916d2405
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: e9354ed8efc0e0fb8c5aadac48ee2dd5f9c54083
      https://github.com/heimdal/heimdal/commit/e9354ed8efc0e0fb8c5aadac48ee2dd5f9c54083
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


Compare: https://github.com/heimdal/heimdal/compare/ae2adf20ecb7...e9354ed8efc0

From noreply at github.com  Mon Dec  7 12:59:49 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 03:59:49 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 11d7e8: use aead_crypto
	test
Message-ID: <566574b58e112_79b63fb932c012c02116ee@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 11d7e8a66a25edb34242374b3deb2ee16081a40b
      https://github.com/heimdal/heimdal/commit/11d7e8a66a25edb34242374b3deb2ee16081a40b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: 222c1dfcc73ca4e2e83858ddb4dc8fed4ad52b37
      https://github.com/heimdal/heimdal/commit/222c1dfcc73ca4e2e83858ddb4dc8fed4ad52b37
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: 8d5a8ba0e23f7206cb10d624b850e9f87d7b6804
      https://github.com/heimdal/heimdal/commit/8d5a8ba0e23f7206cb10d624b850e9f87d7b6804
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: 090b3b3b64789618e6c00655d981923319fab9ba
      https://github.com/heimdal/heimdal/commit/090b3b3b64789618e6c00655d981923319fab9ba
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


Compare: https://github.com/heimdal/heimdal/compare/e9354ed8efc0...090b3b3b6478

From noreply at github.com  Mon Dec  7 13:35:51 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 04:35:51 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] f2b7ac: cleanup after
	KDF failure
Message-ID: <56657d2799a47_41ab3f8cb0bc32bc959f5@hookshot-fe4-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: f2b7accd8a050f29131f4f41c612fb194b4e2cae
      https://github.com/heimdal/heimdal/commit/f2b7accd8a050f29131f4f41c612fb194b4e2cae
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: 4bde459770c21411cf146e80c55f992d18465588
      https://github.com/heimdal/heimdal/commit/4bde459770c21411cf146e80c55f992d18465588
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


Compare: https://github.com/heimdal/heimdal/compare/090b3b3b6478...4bde459770c2

From noreply at github.com  Mon Dec  7 13:42:37 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 04:42:37 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] a30d4c: explain how
	encrypt has been overloaded
Message-ID: <56657ebdddb9a_367d3faee4dfb2b8520dd@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: a30d4cf03bb9bf432999bcaac8020627e493c600
      https://github.com/heimdal/heimdal/commit/a30d4cf03bb9bf432999bcaac8020627e493c600
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-07 (Mon, 07 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded



From noreply at github.com  Tue Dec  8 00:08:38 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 15:08:38 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 9f29d0: unbreak RFC4537
 by only setting enctypes if cred h...
Message-ID: <566611762f63f_721e3faeaeaf92bc98667@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 9f29d02aa1c1cda658bbec469d7c6068b3533b0d
      https://github.com/heimdal/heimdal/commit/9f29d02aa1c1cda658bbec469d7c6068b3533b0d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them



From noreply at github.com  Tue Dec  8 02:27:35 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 17:27:35 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] de5796:
	_krb5_SP800_108_KDF fix expansion
Message-ID: <56663207978f7_23bc3f820aaf72bc576c7@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: de57962fc64a5afa1a64d11c0fae4db1048649bc
      https://github.com/heimdal/heimdal/commit/de57962fc64a5afa1a64d11c0fae4db1048649bc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  _krb5_SP800_108_KDF fix expansion



From noreply at github.com  Tue Dec  8 02:41:04 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 17:41:04 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 70cc89: ivec never NULL
Message-ID: <56663530bf67c_721e3faeaeaf92bc103282@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 70cc892d0daa2bca77125224ba04db15ffb85ab2
      https://github.com/heimdal/heimdal/commit/70cc892d0daa2bca77125224ba04db15ffb85ab2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: bc77567e2f22c914db6ffffd900d1e75a9688906
      https://github.com/heimdal/heimdal/commit/bc77567e2f22c914db6ffffd900d1e75a9688906
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


Compare: https://github.com/heimdal/heimdal/compare/9f29d02aa1c1...bc77567e2f22

From noreply at github.com  Tue Dec  8 04:56:03 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 19:56:03 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] e44f79: temporary
	enctypes
Message-ID: <566654d3f3a5_a713fccd75612b81872c6@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: e44f793d5767c920f461fb792970a721e9d9e0aa
      https://github.com/heimdal/heimdal/commit/e44f793d5767c920f461fb792970a721e9d9e0aa
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: 7b843b995d3fa98aa07dae61040de22dbec14d33
      https://github.com/heimdal/heimdal/commit/7b843b995d3fa98aa07dae61040de22dbec14d33
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: e12a3e1cc5434b54af8b12e5d37dd4248b686352
      https://github.com/heimdal/heimdal/commit/e12a3e1cc5434b54af8b12e5d37dd4248b686352
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: 898f06e8bbe6b1e6ec94a50696e53133269a27ed
      https://github.com/heimdal/heimdal/commit/898f06e8bbe6b1e6ec94a50696e53133269a27ed
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: d1410791dc905dd3d25ab296d5c38e851e08d1ee
      https://github.com/heimdal/heimdal/commit/d1410791dc905dd3d25ab296d5c38e851e08d1ee
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: 0cede91e4a3f6e94bcd8561cf5b833331488b656
      https://github.com/heimdal/heimdal/commit/0cede91e4a3f6e94bcd8561cf5b833331488b656
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: fa811c9b7eade17c1e3dd9e77941f22d347d84a9
      https://github.com/heimdal/heimdal/commit/fa811c9b7eade17c1e3dd9e77941f22d347d84a9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: 761c7036722071133d9b65465de12f92be6debe3
      https://github.com/heimdal/heimdal/commit/761c7036722071133d9b65465de12f92be6debe3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: bea3241c9a9a8f61b605858025bd30502ced9ba2
      https://github.com/heimdal/heimdal/commit/bea3241c9a9a8f61b605858025bd30502ced9ba2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: 8261a6edf5fd6b0ba2a2d2de4fd97bafe15fe427
      https://github.com/heimdal/heimdal/commit/8261a6edf5fd6b0ba2a2d2de4fd97bafe15fe427
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  gss fluff


  Commit: f52b75169d883d5d2e4667361fc9a50805abb1cd
      https://github.com/heimdal/heimdal/commit/f52b75169d883d5d2e4667361fc9a50805abb1cd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: f94f651f4633357324bfda7ace97cefbf1f54e64
      https://github.com/heimdal/heimdal/commit/f94f651f4633357324bfda7ace97cefbf1f54e64
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: 0763a4771092a5045ac0c8dd055ae6eaa81f2526
      https://github.com/heimdal/heimdal/commit/0763a4771092a5045ac0c8dd055ae6eaa81f2526
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: 0eb5af61344530c78fa8e15bef27201acf012ba6
      https://github.com/heimdal/heimdal/commit/0eb5af61344530c78fa8e15bef27201acf012ba6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: 16a0cfb51b06f60bf8f62a59c1d580befe28beca
      https://github.com/heimdal/heimdal/commit/16a0cfb51b06f60bf8f62a59c1d580befe28beca
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: 55560b939b29c941cc0e631086c27616962097fc
      https://github.com/heimdal/heimdal/commit/55560b939b29c941cc0e631086c27616962097fc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: 0635f59daf357c5c6a6549917196026315d57496
      https://github.com/heimdal/heimdal/commit/0635f59daf357c5c6a6549917196026315d57496
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: e97b10537dc2a6867d3db6bb2199e84943ad3a97
      https://github.com/heimdal/heimdal/commit/e97b10537dc2a6867d3db6bb2199e84943ad3a97
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: d0abec5e207ddc084c885dad8626d5c94c8714ed
      https://github.com/heimdal/heimdal/commit/d0abec5e207ddc084c885dad8626d5c94c8714ed
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: a8ad88a371daed63f56a6b05c9eee22d2db7db99
      https://github.com/heimdal/heimdal/commit/a8ad88a371daed63f56a6b05c9eee22d2db7db99
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: 3a50a96737f492c1e5d6b5373486501b762e0496
      https://github.com/heimdal/heimdal/commit/3a50a96737f492c1e5d6b5373486501b762e0496
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: 9944d98ef6d409c5cd58295113cd61c5d8dba810
      https://github.com/heimdal/heimdal/commit/9944d98ef6d409c5cd58295113cd61c5d8dba810
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


  Commit: b56b191520870ecb2dd209c590771b7428bb5c20
      https://github.com/heimdal/heimdal/commit/b56b191520870ecb2dd209c590771b7428bb5c20
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead


  Commit: b5bee93af6647d2f9ca42147ab2df9f706322db1
      https://github.com/heimdal/heimdal/commit/b5bee93af6647d2f9ca42147ab2df9f706322db1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: 4cf403e1597f5cc0b2fc4aad8a88d2a7962ea232
      https://github.com/heimdal/heimdal/commit/4cf403e1597f5cc0b2fc4aad8a88d2a7962ea232
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: 183197a290fa2a0be8e7ed7cf6e2f54b6d0e836f
      https://github.com/heimdal/heimdal/commit/183197a290fa2a0be8e7ed7cf6e2f54b6d0e836f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


  Commit: 1e69d2e79a687bf6b4f497e96faef029f117c2cb
      https://github.com/heimdal/heimdal/commit/1e69d2e79a687bf6b4f497e96faef029f117c2cb
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx


  Commit: a6fb87dbac56c5047317e73e157472cd4f574e71
      https://github.com/heimdal/heimdal/commit/a6fb87dbac56c5047317e73e157472cd4f574e71
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: ff87f7f6d5b561f2e0aef2814b4f65d517a77980
      https://github.com/heimdal/heimdal/commit/ff87f7f6d5b561f2e0aef2814b4f65d517a77980
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: e3431ee36c4d4897406caa225b4edcab98054c67
      https://github.com/heimdal/heimdal/commit/e3431ee36c4d4897406caa225b4edcab98054c67
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  rename back to _krb5_SP800_108_KDF


  Commit: 0d19fc5b66ab34787cee5ccaad68951414d433b2
      https://github.com/heimdal/heimdal/commit/0d19fc5b66ab34787cee5ccaad68951414d433b2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: 5da979221421fd0b9f99b29553e5fcdc608a374c
      https://github.com/heimdal/heimdal/commit/5da979221421fd0b9f99b29553e5fcdc608a374c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: 02fabb4301a245d269f687f0e13dc84706c96551
      https://github.com/heimdal/heimdal/commit/02fabb4301a245d269f687f0e13dc84706c96551
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


  Commit: b902978277333238e73c598b6ea2b71cde9b440e
      https://github.com/heimdal/heimdal/commit/b902978277333238e73c598b6ea2b71cde9b440e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: de638bd3cd93e82828edeece14bef88c13beb8e9
      https://github.com/heimdal/heimdal/commit/de638bd3cd93e82828edeece14bef88c13beb8e9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: fe857a96d90468f18437ff7c036803cb33b7a342
      https://github.com/heimdal/heimdal/commit/fe857a96d90468f18437ff7c036803cb33b7a342
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: 80c9888ca9aafacc71f1ed928ad991e46b076085
      https://github.com/heimdal/heimdal/commit/80c9888ca9aafacc71f1ed928ad991e46b076085
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


  Commit: 6da799daaa112a15b439e6cae692a25db86fdd57
      https://github.com/heimdal/heimdal/commit/6da799daaa112a15b439e6cae692a25db86fdd57
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: 3094a21b767089d94ee8cf3de877ba3ceb3ea969
      https://github.com/heimdal/heimdal/commit/3094a21b767089d94ee8cf3de877ba3ceb3ea969
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


  Commit: db72b2389175ab74a174eaa776333acce08374ce
      https://github.com/heimdal/heimdal/commit/db72b2389175ab74a174eaa776333acce08374ce
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded


  Commit: beecc666a0e88726b194a8681c2b9a92eb63539a
      https://github.com/heimdal/heimdal/commit/beecc666a0e88726b194a8681c2b9a92eb63539a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them


  Commit: c365d15ee5d097d959a4156bfcf9c63605ad59d3
      https://github.com/heimdal/heimdal/commit/c365d15ee5d097d959a4156bfcf9c63605ad59d3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: 377e50b9c0295f5f66a8d071653e6ee8169a0719
      https://github.com/heimdal/heimdal/commit/377e50b9c0295f5f66a8d071653e6ee8169a0719
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


  Commit: 21beae10a3a79df38c315fbfa3a6c108cf6376cf
      https://github.com/heimdal/heimdal/commit/21beae10a3a79df38c315fbfa3a6c108cf6376cf
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  set header to 0 if present


  Commit: 6f6c86952238a64bdf081b0aa7a3e0631677a1be
      https://github.com/heimdal/heimdal/commit/6f6c86952238a64bdf081b0aa7a3e0631677a1be
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  salt IV with last 4 bytes of key, make key longer


Compare: https://github.com/heimdal/heimdal/compare/bc77567e2f22...6f6c86952238

From noreply at github.com  Tue Dec  8 07:00:22 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 22:00:22 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 788938: Revert "salt IV
 with last 4 bytes of key, make key...
Message-ID: <566671f67c832_8ba3f912067929c72365@hookshot-fe4-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 788938d73e8a9926ca5fbb3efb436122b9f35123
      https://github.com/heimdal/heimdal/commit/788938d73e8a9926ca5fbb3efb436122b9f35123
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  Revert "salt IV with last 4 bytes of key, make key longer"

This reverts commit 6f6c86952238a64bdf081b0aa7a3e0631677a1be.



From noreply at github.com  Tue Dec  8 08:06:36 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 23:06:36 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 19e9ae: readability
	fixes (in theory)
Message-ID: <5666817cb73d4_44ac3ff15010f2bc17944d@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 19e9aee6f132526a9525f40182ee4863ee11689f
      https://github.com/heimdal/heimdal/commit/19e9aee6f132526a9525f40182ee4863ee11689f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  readability fixes (in theory)



From noreply at github.com  Tue Dec  8 08:11:11 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 23:11:11 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 72adb4: remove some
	error checking, less code (!)
Message-ID: <5666828f5bc27_bda3f86c9f492c059459@hookshot-fe4-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 72adb4b5df77b7fa9768b3dc7f00cc7e83f96a89
      https://github.com/heimdal/heimdal/commit/72adb4b5df77b7fa9768b3dc7f00cc7e83f96a89
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove some error checking, less code (!)



From noreply at github.com  Tue Dec  8 08:30:16 2015
From: noreply at github.com (GitHub)
Date: Mon, 07 Dec 2015 23:30:16 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] dbb2e4: propagate MS EC
	DCE_STYLE bug for AEAD, yay
Message-ID: <56668708bbdf4_5e943fef3f3b329c965d9@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: dbb2e4fb1ced2e31ef871dbc817214a7273c7a15
      https://github.com/heimdal/heimdal/commit/dbb2e4fb1ced2e31ef871dbc817214a7273c7a15
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  propagate MS EC DCE_STYLE bug for AEAD, yay



From noreply at github.com  Tue Dec  8 09:53:03 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 00:53:03 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 0dd00f: check for IV at
	AEAD API layer
Message-ID: <56669a6fd46e5_9d93ff1e744b2b814543b@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 0dd00f8eb56416197fb846dedd468338a7efbedc
      https://github.com/heimdal/heimdal/commit/0dd00f8eb56416197fb846dedd468338a7efbedc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  check for IV at AEAD API layer


  Commit: e9427837ae55e334043ff17062bebf6431090dff
      https://github.com/heimdal/heimdal/commit/e9427837ae55e334043ff17062bebf6431090dff
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  code cleanup


Compare: https://github.com/heimdal/heimdal/compare/dbb2e4fb1ced...e9427837ae55

From noreply at github.com  Tue Dec  8 13:10:22 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 04:10:22 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] adaf43: allow AEAD
	ciphers without F_DERIVED
Message-ID: <5666c8ae98b67_64823f9e8d2152bc85217@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: adaf43397a5181e0088238772c74f978256b082e
      https://github.com/heimdal/heimdal/commit/adaf43397a5181e0088238772c74f978256b082e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  allow AEAD ciphers without F_DERIVED



From noreply at github.com  Tue Dec  8 13:24:58 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 04:24:58 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] df020b: move iov_find to
	crypto.h
Message-ID: <5666cc1aa00e7_56653faaf8f3d29c39671@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: df020bef8e6f0868728d6d1242459ccf05c02910
      https://github.com/heimdal/heimdal/commit/df020bef8e6f0868728d6d1242459ccf05c02910
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  move iov_find to crypto.h



From noreply at github.com  Tue Dec  8 14:41:52 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 05:41:52 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] f1b5e9: use
	CipherFinal_ex to generate tag
Message-ID: <5666de205a226_14c93fe110eb329c933f6@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: f1b5e9e5ddc39c8099b688f48b26e203075899de
      https://github.com/heimdal/heimdal/commit/f1b5e9e5ddc39c8099b688f48b26e203075899de
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  use CipherFinal_ex to generate tag


  Commit: c17c50672192a139723ee74f5b5e7e0396897cfd
      https://github.com/heimdal/heimdal/commit/c17c50672192a139723ee74f5b5e7e0396897cfd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  code cleanup


Compare: https://github.com/heimdal/heimdal/compare/df020bef8e6f...c17c50672192

From noreply at github.com  Tue Dec  8 14:50:49 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 05:50:49 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 31714f: musings on
	horrible OpenSSL API
Message-ID: <5666e0396c9f6_1e903f93d8c0d2c06574a@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 31714fd23e5e7c11efa46df0cabaebe159defd90
      https://github.com/heimdal/heimdal/commit/31714fd23e5e7c11efa46df0cabaebe159defd90
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  musings on horrible OpenSSL API



From noreply at github.com  Tue Dec  8 15:10:55 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 06:10:55 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] eef095: simplify
Message-ID: <5666e4ef5a788_1d333fbb358cb2b84799d@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: eef09525b3e2a9a22670c78834d9380b21e62be2
      https://github.com/heimdal/heimdal/commit/eef09525b3e2a9a22670c78834d9380b21e62be2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  simplify


  Commit: 640488ef3f538a5882b82b73c138c02139daa5f5
      https://github.com/heimdal/heimdal/commit/640488ef3f538a5882b82b73c138c02139daa5f5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  add some more comments


Compare: https://github.com/heimdal/heimdal/compare/31714fd23e5e...640488ef3f53

From noreply at github.com  Tue Dec  8 22:42:19 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 13:42:19 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] bef84f: slighty less
 bogus overloading of encrypt callback
Message-ID: <56674ebb641d0_6f823ffd023d72c010555c@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: bef84f5cc5b170c2fb8cea1a5ed647ebdd33c273
      https://github.com/heimdal/heimdal/commit/bef84f5cc5b170c2fb8cea1a5ed647ebdd33c273
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  slighty less bogus overloading of encrypt callback



From noreply at github.com  Tue Dec  8 22:42:48 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 13:42:48 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 727c3f: fix typo
Message-ID: <56674ed864b4a_70d83fa0ac2fb2a084089@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 727c3f6c964d6932c4143b15a095245e4fe41b73
      https://github.com/heimdal/heimdal/commit/727c3f6c964d6932c4143b15a095245e4fe41b73
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  fix typo



From noreply at github.com  Tue Dec  8 23:19:54 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 14:19:54 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] d219d4: remove
	extraneous PADL copyright
Message-ID: <5667578a10581_76763ff3c067129c655da@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: d219d4ed174a4240f9d317d1d633b598a032c3a5
      https://github.com/heimdal/heimdal/commit/d219d4ed174a4240f9d317d1d633b598a032c3a5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  remove extraneous PADL copyright



From noreply at github.com  Wed Dec  9 00:49:10 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 15:49:10 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] d13502: kdc: Fix compile
	error on OS X
Message-ID: <56676c76cffba_5f1d3f8aa12c32b8100213@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: d135020e8f89145cbd2606cb6772ec012950c395
      https://github.com/heimdal/heimdal/commit/d135020e8f89145cbd2606cb6772ec012950c395
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M kdc/connect.c

  Log Message:
  -----------
  kdc: Fix compile error on OS X

bonjour_kid() was missing the krb5_context parameter name, preventing
compilation on Darwin (where __APPLE__ is defined)



From noreply at github.com  Wed Dec  9 01:09:44 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 16:09:44 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 54e6db: libedit: Solaris
	portability fixes
Message-ID: <56677148515eb_6f823ffd023d72c01093dd@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 54e6dbed29130d86cd042391ead8576d07e4ed9f
      https://github.com/heimdal/heimdal/commit/54e6dbed29130d86cd042391ead8576d07e4ed9f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/libedit/config.h.in
    M lib/libedit/src/el_term.h
    M lib/libedit/src/sys.h

  Log Message:
  -----------
  libedit: Solaris portability fixes

__sun braced curses prototypes no longer compile on Solaris, remove them


  Commit: ed3e748c75860772ba71aa2ea001f0cde144161f
      https://github.com/heimdal/heimdal/commit/ed3e748c75860772ba71aa2ea001f0cde144161f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/hx509/ref/pkcs11.h

  Log Message:
  -----------
  hx509: update to newer PKCS#11 header

newer PKCS#11 reference header file, sourced from SoftHSM


  Commit: acad7be65ec3dd504470f8f8a4d6f353718e93bc
      https://github.com/heimdal/heimdal/commit/acad7be65ec3dd504470f8f8a4d6f353718e93bc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/base/baselocl.h

  Log Message:
  -----------
  base: Solaris and AIX atomic increment/exchange

Implement heim_base_atomic_XXX and heim_base_exchange_pointer
for Solaris and AIX. (AIX not tested.)


  Commit: 0de138a7dc55fc3a8becfffb7f3e4738057c7c77
      https://github.com/heimdal/heimdal/commit/0de138a7dc55fc3a8becfffb7f3e4738057c7c77
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M cf/sunos.m4

  Log Message:
  -----------
  cf: define __EXTENSIONS__ on Solaris

defining __EXTENSIONS__ is necessary to build on Solaris 11


  Commit: f789d8403e875c59373bdc668e439a2f3bba3c81
      https://github.com/heimdal/heimdal/commit/f789d8403e875c59373bdc668e439a2f3bba3c81
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/hx509/Makefile.am
    M lib/hx509/NTMakefile
    M lib/hx509/ks_p11.c
    M lib/hx509/softp11.c
    M lib/hx509/test_soft_pkcs11.c

  Log Message:
  -----------
  hx509: explicitly include ref/pkcs11.h

review comment from Nico Williams: explicitly include ref/pkcs11.h to
avoid any conflict with system PKCS#11 header


  Commit: 494b11f96253317c2c630d77d16a0b662dc6d343
      https://github.com/heimdal/heimdal/commit/494b11f96253317c2c630d77d16a0b662dc6d343
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/hcrypto/evp-cc.c
    M lib/hcrypto/evp-crypt.c
    M lib/hcrypto/evp-hcrypto.c
    M lib/hcrypto/evp-wincng.c

  Log Message:
  -----------
  hcrypto: fix spelling mistakes in comments


  Commit: fdf8782db2dcb140430325183b9e7fda7530a45a
      https://github.com/heimdal/heimdal/commit/fdf8782db2dcb140430325183b9e7fda7530a45a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M cf/crypto.m4
    M lib/hcrypto/Makefile.am
    M lib/hcrypto/NTMakefile
    A lib/hcrypto/evp-pkcs11.c
    A lib/hcrypto/evp-pkcs11.h
    M lib/hcrypto/evp.c
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/test_bulk.c
    M lib/hcrypto/test_cipher.c
    M lib/hcrypto/version-script.map

  Log Message:
  -----------
  hcrypto: PKCS#11 backend

implement a PKCS#11 backend for hcrypto. tested with Solaris 11 and
SoftHSM, this is now the default when building on Solaris.


Compare: https://github.com/heimdal/heimdal/compare/d135020e8f89...fdf8782db2dc

From noreply at github.com  Wed Dec  9 01:12:44 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 16:12:44 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal]
Message-ID: <566771fc974bf_69ce3ff366d672b8306f0@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/pkcs11-hcrypto
  Home:   https://github.com/heimdal/heimdal

From noreply at github.com  Wed Dec  9 01:13:40 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 16:13:40 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal]
Message-ID: <56677234599a7_75d03fa6d23a32bc57124@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/pkcs11-hcrypto
  Home:   https://github.com/heimdal/heimdal

From noreply at github.com  Wed Dec  9 01:14:19 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 16:14:19 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] fd15f0: initial cut of
 draft-ietf-kitten-aes-cts-hmac-sha2...
Message-ID: <5667725bc93a5_73453fbcf8d8b2c0871ec@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: fd15f09f829e87c22ecff701828203a2bc6afdfe
      https://github.com/heimdal/heimdal/commit/fd15f09f829e87c22ecff701828203a2bc6afdfe
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M kdc/kerberos5.c
    M lib/asn1/krb5.asn1
    M lib/hcrypto/evp.h
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/pkcs5.c
    M lib/hcrypto/test_pkcs5.c
    M lib/hcrypto/version-script.map
    M lib/krb5/Makefile.am
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-sha1.c
    A lib/krb5/crypto-aes-sha2.c
    R lib/krb5/crypto-aes.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/derived-key-test.c
    M lib/krb5/krb5.h
    M lib/krb5/libkrb5-exports.def.in
    A lib/krb5/salt-aes-sha1.c
    A lib/krb5/salt-aes-sha2.c
    R lib/krb5/salt-aes.c
    A lib/krb5/sp800-108-kdf.c
    M lib/krb5/test_crypto.c
    M lib/krb5/test_crypto_wrapping.c
    M lib/krb5/test_rfc3961.c
    M lib/krb5/version-script.map

  Log Message:
  -----------
  initial cut of draft-ietf-kitten-aes-cts-hmac-sha2-06


  Commit: 8e71f9a18a9996f22fca178133e43b4c2c400bb2
      https://github.com/heimdal/heimdal/commit/8e71f9a18a9996f22fca178133e43b4c2c400bb2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  In draft -07, PRF will be untruncated HMAC


  Commit: b9a3dd3fc9704e641592e0f6cadb7179c418c0aa
      https://github.com/heimdal/heimdal/commit/b9a3dd3fc9704e641592e0f6cadb7179c418c0aa
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  refactor, use Key pointer


  Commit: 3d13c9a7c742f2e0b192327165ba625131bf81e8
      https://github.com/heimdal/heimdal/commit/3d13c9a7c742f2e0b192327165ba625131bf81e8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  check krb5_get_pw_salt return value


  Commit: fbd13fb74d8957e3bceecf889946c26d24623799
      https://github.com/heimdal/heimdal/commit/fbd13fb74d8957e3bceecf889946c26d24623799
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/hdb/keys.c
    M lib/krb5/crypto.c
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  SP800-132 requires random salt of at least 128 bits


  Commit: d67741ba65287943a8fbde3d02e5adad17b4c563
      https://github.com/heimdal/heimdal/commit/d67741ba65287943a8fbde3d02e5adad17b4c563
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/hdb/mkey.c

  Log Message:
  -----------
  Fix warning, _hdb_find_master_key should take int *


  Commit: 5669f9899284e9c54818cb0968ef37ee4c2544d5
      https://github.com/heimdal/heimdal/commit/5669f9899284e9c54818cb0968ef37ee4c2544d5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 enc tests


  Commit: 741aa56ead78f10960227d095c7d800e0034ab2b
      https://github.com/heimdal/heimdal/commit/741aa56ead78f10960227d095c7d800e0034ab2b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/pseudo-random-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 PRF test


  Commit: 9d3b9e5a8af2a6b1bc0e38220315166108885e5d
      https://github.com/heimdal/heimdal/commit/9d3b9e5a8af2a6b1bc0e38220315166108885e5d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 checksum tests


  Commit: e41af25bf4c8ffea9062233118f44fa591e4cabc
      https://github.com/heimdal/heimdal/commit/e41af25bf4c8ffea9062233118f44fa591e4cabc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/derived-key-test.c

  Log Message:
  -----------
  draft-ietf-kitten-aes-cts-hmac-sha2-07 derived key test


  Commit: c7381dba215cecd330dd608b87bea655f6b40f32
      https://github.com/heimdal/heimdal/commit/c7381dba215cecd330dd608b87bea655f6b40f32
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  updates for draft-ietf-kitten-aes-cts-hmac-sha2-07


  Commit: 1b7f44190d7069b45f417b5f881b2cf03c9d0e3c
      https://github.com/heimdal/heimdal/commit/1b7f44190d7069b45f417b5f881b2cf03c9d0e3c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/salt-aes-sha2.c

  Log Message:
  -----------
  use _krb5_sha2_md_for_enctype in string2key


  Commit: b775b2769edf59025f7c2d003f262db43313e066
      https://github.com/heimdal/heimdal/commit/b775b2769edf59025f7c2d003f262db43313e066
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/salt-aes-sha2.c

  Log Message:
  -----------
  s/_krb5_sha2_md_for_enctype/_krb5_aes_sha2_md_for_enctype


  Commit: f0ffa4fc2f80f08c4269c82abcbf12491bbd7d1c
      https://github.com/heimdal/heimdal/commit/f0ffa4fc2f80f08c4269c82abcbf12491bbd7d1c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  OpenSSL compat: HMAC() takes unsigned char buffer


  Commit: 08675cb10beca55c857e878ce60c7282d3b86acd
      https://github.com/heimdal/heimdal/commit/08675cb10beca55c857e878ce60c7282d3b86acd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/NTMakefile

  Log Message:
  -----------
  conform NTMakefile to Makefile.am for aes-sha2


  Commit: 93383a7c5c6f5e6d2c077dc6bfa5af71a70e32f1
      https://github.com/heimdal/heimdal/commit/93383a7c5c6f5e6d2c077dc6bfa5af71a70e32f1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  use KRB5_PROG_ETYPE_NOSUPP, not KRB5_BAD_ENCTYPE


  Commit: c9be4a431c8293c4c0d1658eab83e6ab54e43f67
      https://github.com/heimdal/heimdal/commit/c9be4a431c8293c4c0d1658eab83e6ab54e43f67
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix search/replace typos


  Commit: 9a5eb5aeaec1bda8e37d1d4065343269513e472d
      https://github.com/heimdal/heimdal/commit/9a5eb5aeaec1bda8e37d1d4065343269513e472d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  do SP800 calculation in bytes, not bits


  Commit: 046014abc488a4406bab9d4ae23956b56dca6257
      https://github.com/heimdal/heimdal/commit/046014abc488a4406bab9d4ae23956b56dca6257
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  _krb5_SP800_108_KDF fix expansion


Compare: https://github.com/heimdal/heimdal/compare/de57962fc64a...046014abc488

From noreply at github.com  Wed Dec  9 01:16:01 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 16:16:01 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 8874f1: krb5: implement
 draft-ietf-kitten-aes-cts-hmac-sha...
Message-ID: <566772c1132cb_5c773ffbcdc5b29c58062@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 8874f1dd0f425a496947efcbb71e7c1bc73be5ac
      https://github.com/heimdal/heimdal/commit/8874f1dd0f425a496947efcbb71e7c1bc73be5ac
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M kdc/kerberos5.c
    M lib/asn1/krb5.asn1
    M lib/hcrypto/evp.h
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/pkcs5.c
    M lib/hcrypto/test_pkcs5.c
    M lib/hcrypto/version-script.map
    M lib/hdb/keys.c
    M lib/hdb/mkey.c
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-sha1.c
    A lib/krb5/crypto-aes-sha2.c
    R lib/krb5/crypto-aes.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/derived-key-test.c
    M lib/krb5/krb5.h
    M lib/krb5/libkrb5-exports.def.in
    A lib/krb5/pseudo-random-test.c
    A lib/krb5/salt-aes-sha1.c
    A lib/krb5/salt-aes-sha2.c
    R lib/krb5/salt-aes.c
    A lib/krb5/sp800-108-kdf.c
    M lib/krb5/test_crypto.c
    M lib/krb5/test_crypto_wrapping.c
    M lib/krb5/test_rfc3961.c
    M lib/krb5/version-script.map

  Log Message:
  -----------
  krb5: implement draft-ietf-kitten-aes-cts-hmac-sha2-07



From noreply at github.com  Wed Dec  9 01:23:22 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 16:23:22 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] fde256: temporary
	enctypes
Message-ID: <5667747af3809_7123fa17a5ab29c54889@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: fde256b4c9e7addf02751027bee3028da9e2bec7
      https://github.com/heimdal/heimdal/commit/fde256b4c9e7addf02751027bee3028da9e2bec7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: 46221f846c6703b5d9191ab2a59489c14370d702
      https://github.com/heimdal/heimdal/commit/46221f846c6703b5d9191ab2a59489c14370d702
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: 28f62ac5dd10c592bc95f46d1dc869ada41203c5
      https://github.com/heimdal/heimdal/commit/28f62ac5dd10c592bc95f46d1dc869ada41203c5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: faa2a890feed071a9a94a8a432a1141ca42b160c
      https://github.com/heimdal/heimdal/commit/faa2a890feed071a9a94a8a432a1141ca42b160c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: 463fd636fb6f086ff04f562153b7345dd06006f1
      https://github.com/heimdal/heimdal/commit/463fd636fb6f086ff04f562153b7345dd06006f1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: 6a32729510f653d0a998725f4588c463120ec6f4
      https://github.com/heimdal/heimdal/commit/6a32729510f653d0a998725f4588c463120ec6f4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: 63c6a95058079407267b0961059b7eb3304a0ca4
      https://github.com/heimdal/heimdal/commit/63c6a95058079407267b0961059b7eb3304a0ca4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: 7697e4834bb875929b4cfa3e5f89003b15b9865f
      https://github.com/heimdal/heimdal/commit/7697e4834bb875929b4cfa3e5f89003b15b9865f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: 75a5b8d407ef6b27ca3231b69f93a097b30eccc1
      https://github.com/heimdal/heimdal/commit/75a5b8d407ef6b27ca3231b69f93a097b30eccc1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: 2d22510076a3e9f2d41b3a35acec4eb67df96f45
      https://github.com/heimdal/heimdal/commit/2d22510076a3e9f2d41b3a35acec4eb67df96f45
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  gss fluff


  Commit: 9374cdb7c6c9c2ad7354810b109d9da220385121
      https://github.com/heimdal/heimdal/commit/9374cdb7c6c9c2ad7354810b109d9da220385121
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: 514b9c62d3f2c432df33c83fdb9683716867dae5
      https://github.com/heimdal/heimdal/commit/514b9c62d3f2c432df33c83fdb9683716867dae5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: 20674ce0a8ce81c81232162c15f52135344d7826
      https://github.com/heimdal/heimdal/commit/20674ce0a8ce81c81232162c15f52135344d7826
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: b5e8d223ee0844827c3fec0f16b3e1efe2b76c17
      https://github.com/heimdal/heimdal/commit/b5e8d223ee0844827c3fec0f16b3e1efe2b76c17
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: 74ab0a9cb7651fc12185ff612e52c6304edee695
      https://github.com/heimdal/heimdal/commit/74ab0a9cb7651fc12185ff612e52c6304edee695
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: abc767922ea703950682928d239b4ed91df5efc0
      https://github.com/heimdal/heimdal/commit/abc767922ea703950682928d239b4ed91df5efc0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: faf4335113803ae5ae22fec2da5a3591530a8a84
      https://github.com/heimdal/heimdal/commit/faf4335113803ae5ae22fec2da5a3591530a8a84
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: 703e18dfb7826f367c442893c2bf84999ec2d70c
      https://github.com/heimdal/heimdal/commit/703e18dfb7826f367c442893c2bf84999ec2d70c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: af8d053f41536a3893e54474ed9d93b4ce51ed2c
      https://github.com/heimdal/heimdal/commit/af8d053f41536a3893e54474ed9d93b4ce51ed2c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: 5b02ccfd47f0e011d781d0ae195727fc9099b6a2
      https://github.com/heimdal/heimdal/commit/5b02ccfd47f0e011d781d0ae195727fc9099b6a2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: 510eefe0d3fce0dca1c4b9165a1999f3ac13ce1a
      https://github.com/heimdal/heimdal/commit/510eefe0d3fce0dca1c4b9165a1999f3ac13ce1a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: 1185f3c96a6815be8fc9a9a3c1a9604b33ef8102
      https://github.com/heimdal/heimdal/commit/1185f3c96a6815be8fc9a9a3c1a9604b33ef8102
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


  Commit: d1bfdae34341bcf62ae58496826cab7dec449e17
      https://github.com/heimdal/heimdal/commit/d1bfdae34341bcf62ae58496826cab7dec449e17
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead


  Commit: 6e1ed9902d75471ced38ff02fd34cb2ff638f011
      https://github.com/heimdal/heimdal/commit/6e1ed9902d75471ced38ff02fd34cb2ff638f011
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: 82f12bd33999737495ca93fde0088320f1ae3831
      https://github.com/heimdal/heimdal/commit/82f12bd33999737495ca93fde0088320f1ae3831
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: 5fc4600fb7f64165ec73ffe7f7d88f618d7fd85e
      https://github.com/heimdal/heimdal/commit/5fc4600fb7f64165ec73ffe7f7d88f618d7fd85e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


  Commit: 3945da9267f7251eb039f39a717a2bec965c439f
      https://github.com/heimdal/heimdal/commit/3945da9267f7251eb039f39a717a2bec965c439f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx


  Commit: d22a396547788c5c9b132699160b1fc72a64dbae
      https://github.com/heimdal/heimdal/commit/d22a396547788c5c9b132699160b1fc72a64dbae
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: 66762c3201a1be6183c365aae4083f9aef746147
      https://github.com/heimdal/heimdal/commit/66762c3201a1be6183c365aae4083f9aef746147
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: 61967c6c054d94376e0e53b8ecc8ef8e6d7d007f
      https://github.com/heimdal/heimdal/commit/61967c6c054d94376e0e53b8ecc8ef8e6d7d007f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  rename back to _krb5_SP800_108_KDF


  Commit: 6023778aadaa11d4e2a4fb9da7ca47b031930dfb
      https://github.com/heimdal/heimdal/commit/6023778aadaa11d4e2a4fb9da7ca47b031930dfb
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: c655c391dca2d6500e11d5af9bc754d443f29881
      https://github.com/heimdal/heimdal/commit/c655c391dca2d6500e11d5af9bc754d443f29881
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: d0f2c50561a3759a38447ffdf086f74485362df5
      https://github.com/heimdal/heimdal/commit/d0f2c50561a3759a38447ffdf086f74485362df5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


  Commit: c3f0b6ace94fd19327cb200c47e536c1c8d37705
      https://github.com/heimdal/heimdal/commit/c3f0b6ace94fd19327cb200c47e536c1c8d37705
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: 0b01cae75b4541e9a1a472019577acc593631962
      https://github.com/heimdal/heimdal/commit/0b01cae75b4541e9a1a472019577acc593631962
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: 56bab1b692c0230eee50f9998d507dd2b8a9a2ba
      https://github.com/heimdal/heimdal/commit/56bab1b692c0230eee50f9998d507dd2b8a9a2ba
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: 70a52e362de296b8107920574ee3b8de662688ab
      https://github.com/heimdal/heimdal/commit/70a52e362de296b8107920574ee3b8de662688ab
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


  Commit: 67f87d1b28697066bc381be39330b52994b29c99
      https://github.com/heimdal/heimdal/commit/67f87d1b28697066bc381be39330b52994b29c99
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: d4bc76298eeb123db6d092fd9dba43bc5c143826
      https://github.com/heimdal/heimdal/commit/d4bc76298eeb123db6d092fd9dba43bc5c143826
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


  Commit: 645b2da1856188b19e6d762dc00d575c7423d661
      https://github.com/heimdal/heimdal/commit/645b2da1856188b19e6d762dc00d575c7423d661
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded


  Commit: 89f7b691eb93f14a2d02d2f5f93f35be85fe8ae2
      https://github.com/heimdal/heimdal/commit/89f7b691eb93f14a2d02d2f5f93f35be85fe8ae2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them


  Commit: fe23657cee85dbbac9ce9c1f7d436d510f5dafe8
      https://github.com/heimdal/heimdal/commit/fe23657cee85dbbac9ce9c1f7d436d510f5dafe8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: 2dad069b38ca7976a2f03d029cd93cb4c487fdc0
      https://github.com/heimdal/heimdal/commit/2dad069b38ca7976a2f03d029cd93cb4c487fdc0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


  Commit: 5293743defbcf5d89e8dd72b78bef9ea6851902d
      https://github.com/heimdal/heimdal/commit/5293743defbcf5d89e8dd72b78bef9ea6851902d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  set header to 0 if present


  Commit: 0521fa63abfb93665823671d419046b9a21d0523
      https://github.com/heimdal/heimdal/commit/0521fa63abfb93665823671d419046b9a21d0523
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  salt IV with last 4 bytes of key, make key longer


  Commit: 91e7ef6d9cb9d198497ba5af2e23638c63cc3c3f
      https://github.com/heimdal/heimdal/commit/91e7ef6d9cb9d198497ba5af2e23638c63cc3c3f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  Revert "salt IV with last 4 bytes of key, make key longer"

This reverts commit 6f6c86952238a64bdf081b0aa7a3e0631677a1be.


  Commit: ebec9ff2831357e5791caf4c587cc5ece243af34
      https://github.com/heimdal/heimdal/commit/ebec9ff2831357e5791caf4c587cc5ece243af34
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  readability fixes (in theory)


  Commit: 2d509cb09d66cbaeac1dba4784465022f2f1338b
      https://github.com/heimdal/heimdal/commit/2d509cb09d66cbaeac1dba4784465022f2f1338b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove some error checking, less code (!)


  Commit: 2d42f9a5ca61b0f7ef1b7b66cc98e91a4e292916
      https://github.com/heimdal/heimdal/commit/2d42f9a5ca61b0f7ef1b7b66cc98e91a4e292916
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  propagate MS EC DCE_STYLE bug for AEAD, yay


  Commit: 92abbb08f812f31c6f82c3f3794c3f128bbfdc4b
      https://github.com/heimdal/heimdal/commit/92abbb08f812f31c6f82c3f3794c3f128bbfdc4b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  check for IV at AEAD API layer


  Commit: bafe8226fd76b6a92d0fbbef1e825f107361d784
      https://github.com/heimdal/heimdal/commit/bafe8226fd76b6a92d0fbbef1e825f107361d784
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  code cleanup


  Commit: 545410e55dbbc184c23b95172f6c025d804384df
      https://github.com/heimdal/heimdal/commit/545410e55dbbc184c23b95172f6c025d804384df
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  allow AEAD ciphers without F_DERIVED


  Commit: 3e195a8598a736f71ae3a2625665140d6348aa13
      https://github.com/heimdal/heimdal/commit/3e195a8598a736f71ae3a2625665140d6348aa13
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  move iov_find to crypto.h


  Commit: 20af43e1ca538e3dbaabf5fefd590c3d380c64f1
      https://github.com/heimdal/heimdal/commit/20af43e1ca538e3dbaabf5fefd590c3d380c64f1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  use CipherFinal_ex to generate tag


  Commit: 90ad2a08ff7261043772429d474bcb0ff777c4e1
      https://github.com/heimdal/heimdal/commit/90ad2a08ff7261043772429d474bcb0ff777c4e1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  code cleanup


  Commit: d12212c816fb7c5afd22caaa1d4df71a21528f2b
      https://github.com/heimdal/heimdal/commit/d12212c816fb7c5afd22caaa1d4df71a21528f2b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  musings on horrible OpenSSL API


  Commit: ffe406ad80462900e98b30b525bd75c6f29b9aa2
      https://github.com/heimdal/heimdal/commit/ffe406ad80462900e98b30b525bd75c6f29b9aa2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  simplify


  Commit: 167f708bfd0fde34506bd8879f844f6fb6f83fad
      https://github.com/heimdal/heimdal/commit/167f708bfd0fde34506bd8879f844f6fb6f83fad
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  add some more comments


  Commit: 42eed6c017b3a365357936a2ce45c7d94e443b06
      https://github.com/heimdal/heimdal/commit/42eed6c017b3a365357936a2ce45c7d94e443b06
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  slighty less bogus overloading of encrypt callback


  Commit: 2dc65fbd8c6eb4d146fba7d62f803b624b3e8f40
      https://github.com/heimdal/heimdal/commit/2dc65fbd8c6eb4d146fba7d62f803b624b3e8f40
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  fix typo


  Commit: 21f0005139a0af8184c718877f3eac1c7f94d089
      https://github.com/heimdal/heimdal/commit/21f0005139a0af8184c718877f3eac1c7f94d089
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  remove extraneous PADL copyright


Compare: https://github.com/heimdal/heimdal/compare/d219d4ed174a...21f0005139a0

From noreply at github.com  Wed Dec  9 05:25:36 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 20:25:36 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 4c6ebb: slight refactor
Message-ID: <5667ad4044d40_706e3f94028092bc372a@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 4c6ebb2129f1091f3f88b5ab0831143ab52139a6
      https://github.com/heimdal/heimdal/commit/4c6ebb2129f1091f3f88b5ab0831143ab52139a6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  slight refactor



From noreply at github.com  Wed Dec  9 05:43:16 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 20:43:16 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 3edd51: temporary
	enctypes
Message-ID: <5667b164eb693_b0a3fdb93b232bc7213c@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 3edd513ddf11cfa7c344cc3f42f68c15962eb21c
      https://github.com/heimdal/heimdal/commit/3edd513ddf11cfa7c344cc3f42f68c15962eb21c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: 5389c542307fc99c90cf0ca70a95f70245250fb4
      https://github.com/heimdal/heimdal/commit/5389c542307fc99c90cf0ca70a95f70245250fb4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: 0738589f57ddf4c3280435a21736572d4b4528df
      https://github.com/heimdal/heimdal/commit/0738589f57ddf4c3280435a21736572d4b4528df
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: 621faa9f5a2e0b4c20f7a410a3cc53d9d688589c
      https://github.com/heimdal/heimdal/commit/621faa9f5a2e0b4c20f7a410a3cc53d9d688589c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: 426a6bf3bc3cd75129f3f301987c8466da3f6f0d
      https://github.com/heimdal/heimdal/commit/426a6bf3bc3cd75129f3f301987c8466da3f6f0d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: e9dc5304ccd86c1488be27568d8ee5348dede735
      https://github.com/heimdal/heimdal/commit/e9dc5304ccd86c1488be27568d8ee5348dede735
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: cd99572cfcfd5d65b07f799fe1df1a6d9d0989ba
      https://github.com/heimdal/heimdal/commit/cd99572cfcfd5d65b07f799fe1df1a6d9d0989ba
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: f44d0d2a897dff7f6c4083f811cfe2f33f0666df
      https://github.com/heimdal/heimdal/commit/f44d0d2a897dff7f6c4083f811cfe2f33f0666df
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: 6af004f545d7cb18c12bf37733b73abbbf9160f5
      https://github.com/heimdal/heimdal/commit/6af004f545d7cb18c12bf37733b73abbbf9160f5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: aa3a86a7926918fa5ed1122e97a266d3dffcb36b
      https://github.com/heimdal/heimdal/commit/aa3a86a7926918fa5ed1122e97a266d3dffcb36b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  gss fluff


  Commit: ed4b934265006ebf7178066ec1fc4c747a0e039e
      https://github.com/heimdal/heimdal/commit/ed4b934265006ebf7178066ec1fc4c747a0e039e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: afe78ea3088e01096901faa17d784a87f7ed36c2
      https://github.com/heimdal/heimdal/commit/afe78ea3088e01096901faa17d784a87f7ed36c2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: 0047f97b5c12e5a7fcf0e72948b9c6200646e53c
      https://github.com/heimdal/heimdal/commit/0047f97b5c12e5a7fcf0e72948b9c6200646e53c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: 7b31c54281af3a53d7089cbb3de36967caca4aff
      https://github.com/heimdal/heimdal/commit/7b31c54281af3a53d7089cbb3de36967caca4aff
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: 3e4cd6101a93dc12386d9f535f504c410d4c6563
      https://github.com/heimdal/heimdal/commit/3e4cd6101a93dc12386d9f535f504c410d4c6563
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: eb276d6d0abd34c38825fd78f18c3fa0581e6356
      https://github.com/heimdal/heimdal/commit/eb276d6d0abd34c38825fd78f18c3fa0581e6356
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: d9974ffb202d9c5f6c69e78da0b0ebb44991fc8d
      https://github.com/heimdal/heimdal/commit/d9974ffb202d9c5f6c69e78da0b0ebb44991fc8d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: 20110bbb29f806843acdc2de6b9ae81e7d6a61f7
      https://github.com/heimdal/heimdal/commit/20110bbb29f806843acdc2de6b9ae81e7d6a61f7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: 0afdddf1f57d4527bd05dd035cd212c66a961129
      https://github.com/heimdal/heimdal/commit/0afdddf1f57d4527bd05dd035cd212c66a961129
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: b5638b7aa74e3c85a15228e065e1a77a383ee323
      https://github.com/heimdal/heimdal/commit/b5638b7aa74e3c85a15228e065e1a77a383ee323
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: ad5f9aa781c37fc3b3ceab57a4d9e84e378f6d98
      https://github.com/heimdal/heimdal/commit/ad5f9aa781c37fc3b3ceab57a4d9e84e378f6d98
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: 930fec340ca419ab760df6c61a87d29678ab877d
      https://github.com/heimdal/heimdal/commit/930fec340ca419ab760df6c61a87d29678ab877d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


  Commit: dfba0016a4d1a157d0ea0a0de698d672b27ef415
      https://github.com/heimdal/heimdal/commit/dfba0016a4d1a157d0ea0a0de698d672b27ef415
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead


  Commit: 97a8fc691b963de33317d66be6eaca8b5776a29b
      https://github.com/heimdal/heimdal/commit/97a8fc691b963de33317d66be6eaca8b5776a29b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: 1033b61d5fbc01929ecb0cb8854a8530ff3388f1
      https://github.com/heimdal/heimdal/commit/1033b61d5fbc01929ecb0cb8854a8530ff3388f1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: ca88561e6c3a0a9dccd57418b1f3de8e73f5d097
      https://github.com/heimdal/heimdal/commit/ca88561e6c3a0a9dccd57418b1f3de8e73f5d097
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


  Commit: e960e74c81109dfde1bf45c17eef86ddc7c1f2d2
      https://github.com/heimdal/heimdal/commit/e960e74c81109dfde1bf45c17eef86ddc7c1f2d2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx


  Commit: 36d7ef2ea0b1c85a24e9af6d6948cdd612876c3e
      https://github.com/heimdal/heimdal/commit/36d7ef2ea0b1c85a24e9af6d6948cdd612876c3e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: cb51dfee8f3369a59698270d07615f5391be769e
      https://github.com/heimdal/heimdal/commit/cb51dfee8f3369a59698270d07615f5391be769e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: 72b22a51728b2dd385a427388d6c465c45584f4f
      https://github.com/heimdal/heimdal/commit/72b22a51728b2dd385a427388d6c465c45584f4f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: 76beb4fb88be110d7f065022decd0edf1ff2447d
      https://github.com/heimdal/heimdal/commit/76beb4fb88be110d7f065022decd0edf1ff2447d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: 00ae1883cef8d9bf08a7f6b97ded7656ce6bd332
      https://github.com/heimdal/heimdal/commit/00ae1883cef8d9bf08a7f6b97ded7656ce6bd332
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


  Commit: 10f9e3a93473c145686731fae591886dce97dc5d
      https://github.com/heimdal/heimdal/commit/10f9e3a93473c145686731fae591886dce97dc5d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: 8932ef34045c244d37e99e2aa719f68de83f60b1
      https://github.com/heimdal/heimdal/commit/8932ef34045c244d37e99e2aa719f68de83f60b1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: 6ac66464119809ed6ef9212310c0f433d7818b66
      https://github.com/heimdal/heimdal/commit/6ac66464119809ed6ef9212310c0f433d7818b66
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: eb46088948ff3a9c324fe1b798c59b1be919db00
      https://github.com/heimdal/heimdal/commit/eb46088948ff3a9c324fe1b798c59b1be919db00
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


  Commit: 9749d6ad199c40c0f1e39c2caefa674f1786fa4d
      https://github.com/heimdal/heimdal/commit/9749d6ad199c40c0f1e39c2caefa674f1786fa4d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: 99c2b8ea04a25e7d0edeb017bcd7a34fdab6605a
      https://github.com/heimdal/heimdal/commit/99c2b8ea04a25e7d0edeb017bcd7a34fdab6605a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


  Commit: 70852494045f075159c5b75f1c743ba3c5e1946c
      https://github.com/heimdal/heimdal/commit/70852494045f075159c5b75f1c743ba3c5e1946c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded


  Commit: 3d8e019e4598b8bd7bde40e6829f2db5f88f2732
      https://github.com/heimdal/heimdal/commit/3d8e019e4598b8bd7bde40e6829f2db5f88f2732
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them


  Commit: 5b9c429d2015209b851935226566ad08613212ee
      https://github.com/heimdal/heimdal/commit/5b9c429d2015209b851935226566ad08613212ee
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: adbe2be8ae39205174187245f2c7fbbca0ce6b88
      https://github.com/heimdal/heimdal/commit/adbe2be8ae39205174187245f2c7fbbca0ce6b88
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


  Commit: 0372acf28f07e377962f3fc1caea46f79d5506d1
      https://github.com/heimdal/heimdal/commit/0372acf28f07e377962f3fc1caea46f79d5506d1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  set header to 0 if present


  Commit: 325a9696012ea2c76dbfb58d3e881acd50c52663
      https://github.com/heimdal/heimdal/commit/325a9696012ea2c76dbfb58d3e881acd50c52663
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  salt IV with last 4 bytes of key, make key longer


  Commit: 074de8acc6bf5cd92d7baba13e3851c9f3fa0772
      https://github.com/heimdal/heimdal/commit/074de8acc6bf5cd92d7baba13e3851c9f3fa0772
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  Revert "salt IV with last 4 bytes of key, make key longer"

This reverts commit 6f6c86952238a64bdf081b0aa7a3e0631677a1be.


  Commit: 05149aae23385e751cd8f498cfa6ea7f02ee7813
      https://github.com/heimdal/heimdal/commit/05149aae23385e751cd8f498cfa6ea7f02ee7813
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  readability fixes (in theory)


  Commit: a7779a7f20e8bcc1d7d438cb584323b70e55aa9d
      https://github.com/heimdal/heimdal/commit/a7779a7f20e8bcc1d7d438cb584323b70e55aa9d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove some error checking, less code (!)


  Commit: ddbf1516c2b54fb93fda19eaf839624cab53ef67
      https://github.com/heimdal/heimdal/commit/ddbf1516c2b54fb93fda19eaf839624cab53ef67
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  propagate MS EC DCE_STYLE bug for AEAD, yay


  Commit: b717c608af503f6e391a5542532af49ab0b46dc6
      https://github.com/heimdal/heimdal/commit/b717c608af503f6e391a5542532af49ab0b46dc6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  check for IV at AEAD API layer


  Commit: 4dde967f29f18eb446936e3973a8ae7216bb00bc
      https://github.com/heimdal/heimdal/commit/4dde967f29f18eb446936e3973a8ae7216bb00bc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  code cleanup


  Commit: 157a643e1766bbfeda1503a73744bd143878eba8
      https://github.com/heimdal/heimdal/commit/157a643e1766bbfeda1503a73744bd143878eba8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  allow AEAD ciphers without F_DERIVED


  Commit: 476532664c1ac882bc28f2ad891a636afd9fd789
      https://github.com/heimdal/heimdal/commit/476532664c1ac882bc28f2ad891a636afd9fd789
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  move iov_find to crypto.h


  Commit: 11224c173e20ad5aacdb95a88bc98db9f17ad358
      https://github.com/heimdal/heimdal/commit/11224c173e20ad5aacdb95a88bc98db9f17ad358
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  use CipherFinal_ex to generate tag


  Commit: 69c58efa80667e67dd28019117ca2fdcaecfe937
      https://github.com/heimdal/heimdal/commit/69c58efa80667e67dd28019117ca2fdcaecfe937
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  code cleanup


  Commit: c8d769759571b973ea5e68840e2030ab7d05d570
      https://github.com/heimdal/heimdal/commit/c8d769759571b973ea5e68840e2030ab7d05d570
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  musings on horrible OpenSSL API


  Commit: d19497c89c84d21a4816b79656278333262b5681
      https://github.com/heimdal/heimdal/commit/d19497c89c84d21a4816b79656278333262b5681
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  simplify


  Commit: 891bd9860ce6dc9f2a6f1766421a1cbb71c5ea22
      https://github.com/heimdal/heimdal/commit/891bd9860ce6dc9f2a6f1766421a1cbb71c5ea22
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  add some more comments


  Commit: 67552550127b2053cdc0618720b3e352500cf894
      https://github.com/heimdal/heimdal/commit/67552550127b2053cdc0618720b3e352500cf894
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  slighty less bogus overloading of encrypt callback


  Commit: 75ff9da4f69f8360502191baba3fea82789e130f
      https://github.com/heimdal/heimdal/commit/75ff9da4f69f8360502191baba3fea82789e130f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  fix typo


  Commit: 456a7c1bf1257543784ab82443d5deec82dee821
      https://github.com/heimdal/heimdal/commit/456a7c1bf1257543784ab82443d5deec82dee821
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  remove extraneous PADL copyright


  Commit: 1e03a37497d9091691c7cb24bce8f73ff52add57
      https://github.com/heimdal/heimdal/commit/1e03a37497d9091691c7cb24bce8f73ff52add57
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after refactor


Compare: https://github.com/heimdal/heimdal/compare/21f0005139a0...1e03a37497d9

From noreply at github.com  Wed Dec  9 06:27:41 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 21:27:41 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 558887: match temp
 enctypes with Greg Hudson's MIT branch
Message-ID: <5667bbcdd2ba4_49db3fd8509532c07380@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 5588872b6346d9171eccc0f1e82d37b4efef9c45
      https://github.com/heimdal/heimdal/commit/5588872b6346d9171eccc0f1e82d37b4efef9c45
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  match temp enctypes with Greg Hudson's MIT branch


  Commit: 18f507e39f38882ab427cbabe271701c28248a2c
      https://github.com/heimdal/heimdal/commit/18f507e39f38882ab427cbabe271701c28248a2c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  match enctype alias names with Greg Hudson's MIT branch


Compare: https://github.com/heimdal/heimdal/compare/4c6ebb2129f1...18f507e39f38

From noreply at github.com  Wed Dec  9 07:10:46 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 22:10:46 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 52d729: add aes-sha2
 enctypes to default enctype list
Message-ID: <5667c5e65f868_6b2a3ff04eed929c7055a@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 52d729e8e8b13f9effc646b85edaa05cec22b0e4
      https://github.com/heimdal/heimdal/commit/52d729e8e8b13f9effc646b85edaa05cec22b0e4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/context.c

  Log Message:
  -----------
  add aes-sha2 enctypes to default enctype list



From noreply at github.com  Wed Dec  9 08:28:26 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 23:28:26 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] e5018b: temporary
	enctypes
Message-ID: <5667d81ad423e_2b2a3ffc22c0129c550ce@hookshot-fe4-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: e5018b85f2e86f213bf8ca43b41a68eb9cec1f70
      https://github.com/heimdal/heimdal/commit/e5018b85f2e86f213bf8ca43b41a68eb9cec1f70
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: 650f9f8f5edd798605cf837de5a422c1a5d1d298
      https://github.com/heimdal/heimdal/commit/650f9f8f5edd798605cf837de5a422c1a5d1d298
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: 628a8b42f1e62a7101e9a281ac445f6eb8047648
      https://github.com/heimdal/heimdal/commit/628a8b42f1e62a7101e9a281ac445f6eb8047648
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: a8b502981278a49b1c2a5fe54a3cc35975808d15
      https://github.com/heimdal/heimdal/commit/a8b502981278a49b1c2a5fe54a3cc35975808d15
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: 5b58c855c5969ebdfd1105ad3bddac68ba0d8564
      https://github.com/heimdal/heimdal/commit/5b58c855c5969ebdfd1105ad3bddac68ba0d8564
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: dc13a2266fd582407afb913475129d707f8b8821
      https://github.com/heimdal/heimdal/commit/dc13a2266fd582407afb913475129d707f8b8821
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: 067c92a71711f2e4642a7b38b612a059b26b90bd
      https://github.com/heimdal/heimdal/commit/067c92a71711f2e4642a7b38b612a059b26b90bd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: 66eed7d15651f069292686ff88c1afb407bb2821
      https://github.com/heimdal/heimdal/commit/66eed7d15651f069292686ff88c1afb407bb2821
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: d12a7f1b7a741a1b0e9d7c909be2062affe509c5
      https://github.com/heimdal/heimdal/commit/d12a7f1b7a741a1b0e9d7c909be2062affe509c5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: 2880f9e9cdca15ed63598e0593af6e31464948db
      https://github.com/heimdal/heimdal/commit/2880f9e9cdca15ed63598e0593af6e31464948db
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  gss fluff


  Commit: 2a641e0553cb7aaaf9f625671370d756bb92de66
      https://github.com/heimdal/heimdal/commit/2a641e0553cb7aaaf9f625671370d756bb92de66
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: 4742f8caff763008cd44b8eb624be5cfa504d8ec
      https://github.com/heimdal/heimdal/commit/4742f8caff763008cd44b8eb624be5cfa504d8ec
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: 173cc2721f7d12a3186b4d9e9652048c4735a325
      https://github.com/heimdal/heimdal/commit/173cc2721f7d12a3186b4d9e9652048c4735a325
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: 675656a79a6e1d610b783b6e7cfa0a9b4f5d2404
      https://github.com/heimdal/heimdal/commit/675656a79a6e1d610b783b6e7cfa0a9b4f5d2404
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: 650cf03d651fa08be01eaaade69f31f9bb6b48ee
      https://github.com/heimdal/heimdal/commit/650cf03d651fa08be01eaaade69f31f9bb6b48ee
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: 3911f0992c0c985461b7f389d966cc3d04b79653
      https://github.com/heimdal/heimdal/commit/3911f0992c0c985461b7f389d966cc3d04b79653
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: 3a006024b4d34ecb1d4a84af71c918287d77903e
      https://github.com/heimdal/heimdal/commit/3a006024b4d34ecb1d4a84af71c918287d77903e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: 36661de4382fe7999697eb6f110f1a97089c579f
      https://github.com/heimdal/heimdal/commit/36661de4382fe7999697eb6f110f1a97089c579f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: 72236fe94a11247247e058f7da975860270646c7
      https://github.com/heimdal/heimdal/commit/72236fe94a11247247e058f7da975860270646c7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: 32cd9fbea2235753653647161d763f952352bea3
      https://github.com/heimdal/heimdal/commit/32cd9fbea2235753653647161d763f952352bea3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: a327aab5643bc8d4e67e13a07e7908e490663546
      https://github.com/heimdal/heimdal/commit/a327aab5643bc8d4e67e13a07e7908e490663546
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: 21358f32a5a1ea9e8a36b7d1762378dd70325041
      https://github.com/heimdal/heimdal/commit/21358f32a5a1ea9e8a36b7d1762378dd70325041
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


  Commit: dd3b858637c81d248295ad1632931043c7ad3554
      https://github.com/heimdal/heimdal/commit/dd3b858637c81d248295ad1632931043c7ad3554
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead


  Commit: b312ed825597cb2677c7f035093fb010a89b0962
      https://github.com/heimdal/heimdal/commit/b312ed825597cb2677c7f035093fb010a89b0962
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: e276b2fc2e742117b13bb4fd9b24264ac7364ffe
      https://github.com/heimdal/heimdal/commit/e276b2fc2e742117b13bb4fd9b24264ac7364ffe
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: 98e29c3b6b14e4ace0f514c88d68315aa18f18be
      https://github.com/heimdal/heimdal/commit/98e29c3b6b14e4ace0f514c88d68315aa18f18be
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


  Commit: 30a5f924b5b2875f8c0ff5b77f538fa3f3a18873
      https://github.com/heimdal/heimdal/commit/30a5f924b5b2875f8c0ff5b77f538fa3f3a18873
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx


  Commit: 0e8056efbaaabc650c374d6106bb0870af365df7
      https://github.com/heimdal/heimdal/commit/0e8056efbaaabc650c374d6106bb0870af365df7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: c01b82bc8bc9542359d779aa113fccb386d82c7a
      https://github.com/heimdal/heimdal/commit/c01b82bc8bc9542359d779aa113fccb386d82c7a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: 65b0562682b5ca75c6a1d81098a97006a1f9cd74
      https://github.com/heimdal/heimdal/commit/65b0562682b5ca75c6a1d81098a97006a1f9cd74
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: 2ae3258f56cdba54f533ff11c173c1b9bb2e97ba
      https://github.com/heimdal/heimdal/commit/2ae3258f56cdba54f533ff11c173c1b9bb2e97ba
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: 148f9ffdb12529c48d5412e005ac8788ec2f8496
      https://github.com/heimdal/heimdal/commit/148f9ffdb12529c48d5412e005ac8788ec2f8496
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


  Commit: a267d0421dd076e38ed5f4ccca823af083b2320c
      https://github.com/heimdal/heimdal/commit/a267d0421dd076e38ed5f4ccca823af083b2320c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: ed572c54eca5f24aa6360563c9d74f95c63021e3
      https://github.com/heimdal/heimdal/commit/ed572c54eca5f24aa6360563c9d74f95c63021e3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: fe91a322cb3350de78df0a38feb402402acefe9b
      https://github.com/heimdal/heimdal/commit/fe91a322cb3350de78df0a38feb402402acefe9b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: a01386da8c4cb524b9dc8e8874fb2cd99171f894
      https://github.com/heimdal/heimdal/commit/a01386da8c4cb524b9dc8e8874fb2cd99171f894
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


  Commit: 6dfdb06d6db6bcb2e906ac77e8cff9f7d407d02b
      https://github.com/heimdal/heimdal/commit/6dfdb06d6db6bcb2e906ac77e8cff9f7d407d02b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: de68419f47f197b766a446dd21d502966219422c
      https://github.com/heimdal/heimdal/commit/de68419f47f197b766a446dd21d502966219422c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


  Commit: 336177b0960ca312713269682eb4e0d0b75300a3
      https://github.com/heimdal/heimdal/commit/336177b0960ca312713269682eb4e0d0b75300a3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded


  Commit: c308393e989ff3c5f2526600fb02e61ecacba61f
      https://github.com/heimdal/heimdal/commit/c308393e989ff3c5f2526600fb02e61ecacba61f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them


  Commit: 7d5c2ee5e2e7052de7f9e69c3303335bbcec8e81
      https://github.com/heimdal/heimdal/commit/7d5c2ee5e2e7052de7f9e69c3303335bbcec8e81
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: 29c56aec750696058f72734f9048c64f0065b6d3
      https://github.com/heimdal/heimdal/commit/29c56aec750696058f72734f9048c64f0065b6d3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


  Commit: 64ee3ec85e45f8890070a57a15097dcc7a95c82e
      https://github.com/heimdal/heimdal/commit/64ee3ec85e45f8890070a57a15097dcc7a95c82e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  set header to 0 if present


  Commit: 41e5550bebd9244a7378a20b88924d5a02cda9b9
      https://github.com/heimdal/heimdal/commit/41e5550bebd9244a7378a20b88924d5a02cda9b9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  salt IV with last 4 bytes of key, make key longer


  Commit: aa375b65e845cf5fb975a553747178e1f86c6eb3
      https://github.com/heimdal/heimdal/commit/aa375b65e845cf5fb975a553747178e1f86c6eb3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  Revert "salt IV with last 4 bytes of key, make key longer"

This reverts commit 6f6c86952238a64bdf081b0aa7a3e0631677a1be.


  Commit: bd09d10f3fa5ec3f287e9d2f3d91d7c69e1e67f6
      https://github.com/heimdal/heimdal/commit/bd09d10f3fa5ec3f287e9d2f3d91d7c69e1e67f6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  readability fixes (in theory)


  Commit: 185954cd0bece081fd4daa44b3898510f5d59952
      https://github.com/heimdal/heimdal/commit/185954cd0bece081fd4daa44b3898510f5d59952
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove some error checking, less code (!)


  Commit: 1c9c588187d1867d417f83a753cfc660559d01b3
      https://github.com/heimdal/heimdal/commit/1c9c588187d1867d417f83a753cfc660559d01b3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  propagate MS EC DCE_STYLE bug for AEAD, yay


  Commit: 9a612e7096cf32b003c49269f0c595432f58e611
      https://github.com/heimdal/heimdal/commit/9a612e7096cf32b003c49269f0c595432f58e611
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  check for IV at AEAD API layer


  Commit: ddc0f2fe9b53d62491aff9bdb55f7ed485194545
      https://github.com/heimdal/heimdal/commit/ddc0f2fe9b53d62491aff9bdb55f7ed485194545
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  code cleanup


  Commit: 3de8e03c6a837d0d1d0f79c1f639db11c57e96e6
      https://github.com/heimdal/heimdal/commit/3de8e03c6a837d0d1d0f79c1f639db11c57e96e6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  allow AEAD ciphers without F_DERIVED


  Commit: 6d07dad144a4263040b175c0f5e871d4d022fd79
      https://github.com/heimdal/heimdal/commit/6d07dad144a4263040b175c0f5e871d4d022fd79
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  move iov_find to crypto.h


  Commit: 97b5055753b298c3e0f500785d9d743e60560ad0
      https://github.com/heimdal/heimdal/commit/97b5055753b298c3e0f500785d9d743e60560ad0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  use CipherFinal_ex to generate tag


  Commit: cf874a7bec91f6d225ee6c1fa792de622e2d7e2a
      https://github.com/heimdal/heimdal/commit/cf874a7bec91f6d225ee6c1fa792de622e2d7e2a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  code cleanup


  Commit: 199beb28108a4a965fd819abc0f46b34c938d1f5
      https://github.com/heimdal/heimdal/commit/199beb28108a4a965fd819abc0f46b34c938d1f5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  musings on horrible OpenSSL API


  Commit: a067b41bb802660ae187762007da0b26ee04475f
      https://github.com/heimdal/heimdal/commit/a067b41bb802660ae187762007da0b26ee04475f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  simplify


  Commit: 03f6ae992906192af0e7dad0281aeab40faae67f
      https://github.com/heimdal/heimdal/commit/03f6ae992906192af0e7dad0281aeab40faae67f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  add some more comments


  Commit: 7d9923e044e37e2a5b38948499088f41c3367ab2
      https://github.com/heimdal/heimdal/commit/7d9923e044e37e2a5b38948499088f41c3367ab2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  slighty less bogus overloading of encrypt callback


  Commit: 1f38060bef1e253633a3afaf9daf3e7375e0b73b
      https://github.com/heimdal/heimdal/commit/1f38060bef1e253633a3afaf9daf3e7375e0b73b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  fix typo


  Commit: 505d83e0207e21b793bf3b9ba3cda716e8c8b677
      https://github.com/heimdal/heimdal/commit/505d83e0207e21b793bf3b9ba3cda716e8c8b677
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  remove extraneous PADL copyright


  Commit: 5a5e8e26f225c21b8eb7d7da5fa1ec5209e503ec
      https://github.com/heimdal/heimdal/commit/5a5e8e26f225c21b8eb7d7da5fa1ec5209e503ec
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after refactor


  Commit: af2ff5d5dfdde52687724bcd16855a88f41317da
      https://github.com/heimdal/heimdal/commit/af2ff5d5dfdde52687724bcd16855a88f41317da
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/build_auth.c
    M lib/krb5/context.c
    M lib/krb5/krb5.h

  Log Message:
  -----------
  hide AEAD enctypes unless doing RFC4537


Compare: https://github.com/heimdal/heimdal/compare/1e03a37497d9...af2ff5d5dfdd

From noreply at github.com  Wed Dec  9 08:53:21 2015
From: noreply at github.com (GitHub)
Date: Tue, 08 Dec 2015 23:53:21 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 07de5e: try to unbreak
	testsuite
Message-ID: <5667ddf162664_5a223ff79317d2a0924f5@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 07de5e298eb52b31a2ad90770539e394ddda6a8c
      https://github.com/heimdal/heimdal/commit/07de5e298eb52b31a2ad90770539e394ddda6a8c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M tests/gss/check-context.in

  Log Message:
  -----------
  try to unbreak testsuite



From noreply at github.com  Wed Dec  9 09:05:20 2015
From: noreply at github.com (GitHub)
Date: Wed, 09 Dec 2015 00:05:20 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] f5b4ef: gssapi: plug
	leak in test_context IOV test
Message-ID: <5667e0c0b4a74_29453f8fb1e8b2c056686@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: f5b4ef3ed8c99939b2f2c76a6c59da641145a585
      https://github.com/heimdal/heimdal/commit/f5b4ef3ed8c99939b2f2c76a6c59da641145a585
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  gssapi: plug leak in test_context IOV test



From noreply at github.com  Wed Dec  9 09:05:30 2015
From: noreply at github.com (GitHub)
Date: Wed, 09 Dec 2015 00:05:30 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] d3256f: gssapi: plug
	leak in test_context IOV test
Message-ID: <5667e0ca377d0_67403ff874c632a045998@hookshot-fe4-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: d3256f4512d906056bd69acc64a21dc94a4d55f4
      https://github.com/heimdal/heimdal/commit/d3256f4512d906056bd69acc64a21dc94a4d55f4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  gssapi: plug leak in test_context IOV test



From noreply at github.com  Wed Dec  9 13:07:16 2015
From: noreply at github.com (GitHub)
Date: Wed, 09 Dec 2015 04:07:16 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 742ed3: notes
Message-ID: <566819749a321_65913fca2d8ad2c027117@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 742ed32f216138228c2c046e2ea8416f0ccb1011
      https://github.com/heimdal/heimdal/commit/742ed32f216138228c2c046e2ea8416f0ccb1011
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-09 (Wed, 09 Dec 2015)

  Changed paths:
    M lib/krb5/context.c

  Log Message:
  -----------
  notes



From noreply at github.com  Fri Dec 11 02:53:39 2015
From: noreply at github.com (GitHub)
Date: Thu, 10 Dec 2015 17:53:39 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] c1d786: krb5: implement
 draft-ietf-kitten-aes-cts-hmac-sha...
Message-ID: <566a2ca32e0fb_1bf43ffb2386d2c0281be@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: c1d78633e50dc79876805e0925a647986cb5f175
      https://github.com/heimdal/heimdal/commit/c1d78633e50dc79876805e0925a647986cb5f175
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-10 (Thu, 10 Dec 2015)

  Changed paths:
    M kdc/kerberos5.c
    M lib/asn1/krb5.asn1
    M lib/hcrypto/evp.h
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/pkcs5.c
    M lib/hcrypto/test_pkcs5.c
    M lib/hcrypto/version-script.map
    M lib/hdb/keys.c
    M lib/hdb/mkey.c
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-sha1.c
    A lib/krb5/crypto-aes-sha2.c
    R lib/krb5/crypto-aes.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/derived-key-test.c
    M lib/krb5/krb5.h
    M lib/krb5/libkrb5-exports.def.in
    A lib/krb5/pseudo-random-test.c
    A lib/krb5/salt-aes-sha1.c
    A lib/krb5/salt-aes-sha2.c
    R lib/krb5/salt-aes.c
    A lib/krb5/sp800-108-kdf.c
    M lib/krb5/test_crypto.c
    M lib/krb5/test_crypto_wrapping.c
    M lib/krb5/test_rfc3961.c
    M lib/krb5/version-script.map

  Log Message:
  -----------
  krb5: implement draft-ietf-kitten-aes-cts-hmac-sha2-07


  Commit: 8aaa83f9f524039eaf359df9668bd4d31fa456cc
      https://github.com/heimdal/heimdal/commit/8aaa83f9f524039eaf359df9668bd4d31fa456cc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-10 (Thu, 10 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  slight refactor


  Commit: 57b6bfe3ff7cbc45552c93e3296b38b77e8bc310
      https://github.com/heimdal/heimdal/commit/57b6bfe3ff7cbc45552c93e3296b38b77e8bc310
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-10 (Thu, 10 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  match temp enctypes with Greg Hudson's MIT branch


  Commit: 6b1c575da528a674e48b94e5c5b57a819846182a
      https://github.com/heimdal/heimdal/commit/6b1c575da528a674e48b94e5c5b57a819846182a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-10 (Thu, 10 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  match enctype alias names with Greg Hudson's MIT branch


  Commit: 0d01480604ac07530d5454f9f5adc3ca5d089ced
      https://github.com/heimdal/heimdal/commit/0d01480604ac07530d5454f9f5adc3ca5d089ced
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-10 (Thu, 10 Dec 2015)

  Changed paths:
    M lib/krb5/context.c

  Log Message:
  -----------
  add aes-sha2 enctypes to default enctype list


  Commit: 7fec1044c7a3779ba088e8aa170236d9e78bce8c
      https://github.com/heimdal/heimdal/commit/7fec1044c7a3779ba088e8aa170236d9e78bce8c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha1.c
    M lib/krb5/crypto-des3.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  factor out KDF selection into separate functions


  Commit: 5cea8bc6e16b3ef91b98d47132b30f2e55ddb671
      https://github.com/heimdal/heimdal/commit/5cea8bc6e16b3ef91b98d47132b30f2e55ddb671
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  reorder KDFs


  Commit: 00f1dc8ea1659f1efbd25dfda34d1f86b76a553c
      https://github.com/heimdal/heimdal/commit/00f1dc8ea1659f1efbd25dfda34d1f86b76a553c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: f360a074770f7d30cc95192807e77af430a692ac
      https://github.com/heimdal/heimdal/commit/f360a074770f7d30cc95192807e77af430a692ac
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: 025208e3f9c9b9c14b5e66e1bd49b372e534078e
      https://github.com/heimdal/heimdal/commit/025208e3f9c9b9c14b5e66e1bd49b372e534078e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: 5580704e7adff25a825dcaacadb5daaa500a9af2
      https://github.com/heimdal/heimdal/commit/5580704e7adff25a825dcaacadb5daaa500a9af2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: 32c28d885ca9881ceddeab6b889bcb7764b26120
      https://github.com/heimdal/heimdal/commit/32c28d885ca9881ceddeab6b889bcb7764b26120
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: dba94161609a07acb75ffa22aeaec7131093df1c
      https://github.com/heimdal/heimdal/commit/dba94161609a07acb75ffa22aeaec7131093df1c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: a264aee11e0f0d64c1124399620f5836ba6c3815
      https://github.com/heimdal/heimdal/commit/a264aee11e0f0d64c1124399620f5836ba6c3815
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: 3e58985d71e19379e58fed30d6a3cbf1aece5cba
      https://github.com/heimdal/heimdal/commit/3e58985d71e19379e58fed30d6a3cbf1aece5cba
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: 62eb12283f7a06ff8316ac8b7e9566d9355523c3
      https://github.com/heimdal/heimdal/commit/62eb12283f7a06ff8316ac8b7e9566d9355523c3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: aaf0c80b062538eba0c0b09dff119cf82054ae3c
      https://github.com/heimdal/heimdal/commit/aaf0c80b062538eba0c0b09dff119cf82054ae3c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  gss fluff


  Commit: 35ee1c8ec1b2e450a1d036ae71a52e4d7f892968
      https://github.com/heimdal/heimdal/commit/35ee1c8ec1b2e450a1d036ae71a52e4d7f892968
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: a3db7c421baaa99e82b83952fea14f5616ce818b
      https://github.com/heimdal/heimdal/commit/a3db7c421baaa99e82b83952fea14f5616ce818b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: 93b196c405953202b747b3f0c6b30b67550cce23
      https://github.com/heimdal/heimdal/commit/93b196c405953202b747b3f0c6b30b67550cce23
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: 100ff4724c98ab87540d44d37ce2fffcc4c30eef
      https://github.com/heimdal/heimdal/commit/100ff4724c98ab87540d44d37ce2fffcc4c30eef
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: 05d229e0509574696bb4f54766b62ba76d389567
      https://github.com/heimdal/heimdal/commit/05d229e0509574696bb4f54766b62ba76d389567
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: 812b93801267f277ae7555c2152f745ca35ef779
      https://github.com/heimdal/heimdal/commit/812b93801267f277ae7555c2152f745ca35ef779
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: ac5bd70c82dc2bd2f4d855aba353ed4779a372c0
      https://github.com/heimdal/heimdal/commit/ac5bd70c82dc2bd2f4d855aba353ed4779a372c0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: e198f2ef29b32208214705cb5a26a5dafd1843e6
      https://github.com/heimdal/heimdal/commit/e198f2ef29b32208214705cb5a26a5dafd1843e6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: 25959dfa5af621005ad25ba08b4bc1c81e620f49
      https://github.com/heimdal/heimdal/commit/25959dfa5af621005ad25ba08b4bc1c81e620f49
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: 5893db0f6cb858b895aae0ce118301d2d1271e05
      https://github.com/heimdal/heimdal/commit/5893db0f6cb858b895aae0ce118301d2d1271e05
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: cf43d9977dadf5b98bf4a8d3d902143c0087d709
      https://github.com/heimdal/heimdal/commit/cf43d9977dadf5b98bf4a8d3d902143c0087d709
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: 1e2459bac3a6024978bc2ff4360d902027687d23
      https://github.com/heimdal/heimdal/commit/1e2459bac3a6024978bc2ff4360d902027687d23
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


  Commit: 1e7222d0775a58bc1831d794ccc0e08939bb7769
      https://github.com/heimdal/heimdal/commit/1e7222d0775a58bc1831d794ccc0e08939bb7769
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead


  Commit: eedbf6fae3080ee28a1cd5d31e3c841de76d7904
      https://github.com/heimdal/heimdal/commit/eedbf6fae3080ee28a1cd5d31e3c841de76d7904
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: b153424363c5a64950d3b51fc03c469631f131b4
      https://github.com/heimdal/heimdal/commit/b153424363c5a64950d3b51fc03c469631f131b4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: f25a4a301eda442ca6645bfc9b0a738e3675e000
      https://github.com/heimdal/heimdal/commit/f25a4a301eda442ca6645bfc9b0a738e3675e000
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


  Commit: a177f5bf8742fac9c8203f6fddfcf7cbae13f1cc
      https://github.com/heimdal/heimdal/commit/a177f5bf8742fac9c8203f6fddfcf7cbae13f1cc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx


  Commit: f1a747091ed91774f604c23808af8be2452f43ee
      https://github.com/heimdal/heimdal/commit/f1a747091ed91774f604c23808af8be2452f43ee
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: fbb98b79214be5a4cd4d54672d37743c7be11ff8
      https://github.com/heimdal/heimdal/commit/fbb98b79214be5a4cd4d54672d37743c7be11ff8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: 04222fd3c2d146343c5d516487c7b4444a2c9c96
      https://github.com/heimdal/heimdal/commit/04222fd3c2d146343c5d516487c7b4444a2c9c96
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: 687e8a05d90ade130a5428e3fcc30f3a63d45e1d
      https://github.com/heimdal/heimdal/commit/687e8a05d90ade130a5428e3fcc30f3a63d45e1d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: 6aadd32868e865bd35ba9f34748f12f52e1531d7
      https://github.com/heimdal/heimdal/commit/6aadd32868e865bd35ba9f34748f12f52e1531d7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


  Commit: 96139cebef59b02de0d969aa0533aafb5da3e03c
      https://github.com/heimdal/heimdal/commit/96139cebef59b02de0d969aa0533aafb5da3e03c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: 32f23c457eca774dd776b59122702b9d779c465e
      https://github.com/heimdal/heimdal/commit/32f23c457eca774dd776b59122702b9d779c465e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: 7491261ca54175fab18b1a86d42f42d2762fb7c7
      https://github.com/heimdal/heimdal/commit/7491261ca54175fab18b1a86d42f42d2762fb7c7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: 968887ca1b563a9def8f58fba2d4846d94f0efba
      https://github.com/heimdal/heimdal/commit/968887ca1b563a9def8f58fba2d4846d94f0efba
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


  Commit: 766560ee04dcab93dc62356fb58ba1f3fa495da7
      https://github.com/heimdal/heimdal/commit/766560ee04dcab93dc62356fb58ba1f3fa495da7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: 40257b57548f1b1e2851f36cd840720e4aef289f
      https://github.com/heimdal/heimdal/commit/40257b57548f1b1e2851f36cd840720e4aef289f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


  Commit: 9b6e9dcc1288277bae11d08614b15f3b2026bed6
      https://github.com/heimdal/heimdal/commit/9b6e9dcc1288277bae11d08614b15f3b2026bed6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded


  Commit: adcfbc22deb3a910f7e40d45dc7209e3f1c86194
      https://github.com/heimdal/heimdal/commit/adcfbc22deb3a910f7e40d45dc7209e3f1c86194
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them


  Commit: 728f9b0e6ab36e0f9860c6036e173857c28cf491
      https://github.com/heimdal/heimdal/commit/728f9b0e6ab36e0f9860c6036e173857c28cf491
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: 20c7e937029b4afa5c5ea34414192cb77ab36ab1
      https://github.com/heimdal/heimdal/commit/20c7e937029b4afa5c5ea34414192cb77ab36ab1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


  Commit: 7cc8fa8cd34e66270ae86285da4e9769f310e7ee
      https://github.com/heimdal/heimdal/commit/7cc8fa8cd34e66270ae86285da4e9769f310e7ee
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  set header to 0 if present


  Commit: eaf77d0cf6b3d3621da86d4bd36869c93f1b018c
      https://github.com/heimdal/heimdal/commit/eaf77d0cf6b3d3621da86d4bd36869c93f1b018c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  salt IV with last 4 bytes of key, make key longer


  Commit: d439e7752f9c8b160b2cf001834044eeddef7da2
      https://github.com/heimdal/heimdal/commit/d439e7752f9c8b160b2cf001834044eeddef7da2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  Revert "salt IV with last 4 bytes of key, make key longer"

This reverts commit 6f6c86952238a64bdf081b0aa7a3e0631677a1be.


  Commit: 7dc0c7858d0e649cbb3cb8672e310ebec2f3ac5a
      https://github.com/heimdal/heimdal/commit/7dc0c7858d0e649cbb3cb8672e310ebec2f3ac5a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  readability fixes (in theory)


  Commit: 135d3e6cd5b78545738430d556186a80ea67fb0f
      https://github.com/heimdal/heimdal/commit/135d3e6cd5b78545738430d556186a80ea67fb0f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove some error checking, less code (!)


  Commit: 3fdd8da49ee2babd1c97d0c42b315699ed3a8c1b
      https://github.com/heimdal/heimdal/commit/3fdd8da49ee2babd1c97d0c42b315699ed3a8c1b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  propagate MS EC DCE_STYLE bug for AEAD, yay


  Commit: aa33a09342373fcab9a258373ed9c5d5e798b4b9
      https://github.com/heimdal/heimdal/commit/aa33a09342373fcab9a258373ed9c5d5e798b4b9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  check for IV at AEAD API layer


  Commit: 80cd6acb0903f5f9c7fadf9362c50bf714e0d1f0
      https://github.com/heimdal/heimdal/commit/80cd6acb0903f5f9c7fadf9362c50bf714e0d1f0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  code cleanup


  Commit: 17f7782db5814ead15b11c1c1b2b658945ef194a
      https://github.com/heimdal/heimdal/commit/17f7782db5814ead15b11c1c1b2b658945ef194a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  allow AEAD ciphers without F_DERIVED


  Commit: 98fe6b75af53cb6c1ef3a46db4a3e0be17047371
      https://github.com/heimdal/heimdal/commit/98fe6b75af53cb6c1ef3a46db4a3e0be17047371
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  move iov_find to crypto.h


  Commit: 57f6e80303d4116394f97b792499b39ba970e2a7
      https://github.com/heimdal/heimdal/commit/57f6e80303d4116394f97b792499b39ba970e2a7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  use CipherFinal_ex to generate tag


  Commit: 8077c9fc9c353e1ba65c3331cce2704863ddde5f
      https://github.com/heimdal/heimdal/commit/8077c9fc9c353e1ba65c3331cce2704863ddde5f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  code cleanup


  Commit: 240d065a07a71e472ff2f3bd377419bf002b3cce
      https://github.com/heimdal/heimdal/commit/240d065a07a71e472ff2f3bd377419bf002b3cce
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  musings on horrible OpenSSL API


  Commit: a238a1bc6bb254d214e4820b3e8d00dc96c1eaa5
      https://github.com/heimdal/heimdal/commit/a238a1bc6bb254d214e4820b3e8d00dc96c1eaa5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  simplify


  Commit: d840a991cdcf37e6662335aa63bd50e7a9cfb1cb
      https://github.com/heimdal/heimdal/commit/d840a991cdcf37e6662335aa63bd50e7a9cfb1cb
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  add some more comments


  Commit: cc2e01b36605a4b155d96e7bc2b3d384d70863fd
      https://github.com/heimdal/heimdal/commit/cc2e01b36605a4b155d96e7bc2b3d384d70863fd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  slighty less bogus overloading of encrypt callback


  Commit: 33e53103868c0e2913dd173caaf649e996e26220
      https://github.com/heimdal/heimdal/commit/33e53103868c0e2913dd173caaf649e996e26220
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  fix typo


  Commit: 18c1d0362e0e25261f3d8f2cf0515d7e9688d6a4
      https://github.com/heimdal/heimdal/commit/18c1d0362e0e25261f3d8f2cf0515d7e9688d6a4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  remove extraneous PADL copyright


  Commit: 61ffa85142d7448ad06ab3ba50cac5b2f95297cc
      https://github.com/heimdal/heimdal/commit/61ffa85142d7448ad06ab3ba50cac5b2f95297cc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after refactor


  Commit: de6dc25e07c80a348ddb7b2b10d8c98814b85332
      https://github.com/heimdal/heimdal/commit/de6dc25e07c80a348ddb7b2b10d8c98814b85332
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/build_auth.c
    M lib/krb5/context.c
    M lib/krb5/krb5.h

  Log Message:
  -----------
  hide AEAD enctypes unless doing RFC4537


  Commit: 925f36d45c23f015eef60964c825281adbe17190
      https://github.com/heimdal/heimdal/commit/925f36d45c23f015eef60964c825281adbe17190
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M tests/gss/check-context.in

  Log Message:
  -----------
  try to unbreak testsuite


  Commit: 555945c92bb00b28f8da84f1d6e493be133446ad
      https://github.com/heimdal/heimdal/commit/555945c92bb00b28f8da84f1d6e493be133446ad
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/context.c

  Log Message:
  -----------
  notes


  Commit: 23d73b94ea2b80f216294cadf7e69abf2849ce19
      https://github.com/heimdal/heimdal/commit/23d73b94ea2b80f216294cadf7e69abf2849ce19
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-11 (Fri, 11 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  harmonise with new KDF constants


Compare: https://github.com/heimdal/heimdal/compare/742ed32f2161...23d73b94ea2b

From noreply at github.com  Fri Dec 11 02:53:46 2015
From: noreply at github.com (GitHub)
Date: Thu, 10 Dec 2015 17:53:46 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal]
Message-ID: <566a2caaf0c2c_3d863fd1dcc112c085966@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal

From noreply at github.com  Sat Dec 12 00:23:11 2015
From: noreply at github.com (GitHub)
Date: Fri, 11 Dec 2015 15:23:11 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 7948e5: convert big
	crypto if statement to switch
Message-ID: <566b5adf38df5_47db3fbc4863529c1466d4@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 7948e56954ed54f435260f793f6e9e6c2c0ee72f
      https://github.com/heimdal/heimdal/commit/7948e56954ed54f435260f793f6e9e6c2c0ee72f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha1.c
    M lib/krb5/crypto-des3.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  convert big crypto if statement to switch



From noreply at github.com  Sat Dec 12 01:02:16 2015
From: noreply at github.com (GitHub)
Date: Fri, 11 Dec 2015 16:02:16 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] c9725a: reorder
	ENC_THEN_CKSUM
Message-ID: <566b6408f072f_3b793fc0a9fcf2c096282@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: c9725ada352c2380f8508b4b6bc6b995d5982bea
      https://github.com/heimdal/heimdal/commit/c9725ada352c2380f8508b4b6bc6b995d5982bea
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  reorder ENC_THEN_CKSUM



From noreply at github.com  Wed Dec 16 09:09:52 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 00:09:52 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 34e438: temporary
	enctypes
Message-ID: <56711c50e032c_7cbe3fc7fdd4f29c1313b7@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 34e43882add51e9736fc887418c601605a855d34
      https://github.com/heimdal/heimdal/commit/34e43882add51e9736fc887418c601605a855d34
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: 2716e6346ca8608ff36d8c79028456f31af7e118
      https://github.com/heimdal/heimdal/commit/2716e6346ca8608ff36d8c79028456f31af7e118
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: 1e8350d933c270c3c3981848410f92dd43b2b3f0
      https://github.com/heimdal/heimdal/commit/1e8350d933c270c3c3981848410f92dd43b2b3f0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: 0855546ba14c9377fede3a5ce48a3e07c41b3b2e
      https://github.com/heimdal/heimdal/commit/0855546ba14c9377fede3a5ce48a3e07c41b3b2e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: 79d2d68ab7e15544a7de4f5305e307f8769c7880
      https://github.com/heimdal/heimdal/commit/79d2d68ab7e15544a7de4f5305e307f8769c7880
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: 5107df2624593704f7192380cae166899b8d4d01
      https://github.com/heimdal/heimdal/commit/5107df2624593704f7192380cae166899b8d4d01
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: 765487d27d47ea2e6aa805d56d4365567887997c
      https://github.com/heimdal/heimdal/commit/765487d27d47ea2e6aa805d56d4365567887997c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: 7b3718c0a1db8bc70eec6132f00a50255f2107ac
      https://github.com/heimdal/heimdal/commit/7b3718c0a1db8bc70eec6132f00a50255f2107ac
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: c8c5421fda9ad7532b2e0df94b705818c8b0db55
      https://github.com/heimdal/heimdal/commit/c8c5421fda9ad7532b2e0df94b705818c8b0db55
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: 0eeba620280da937f15013d398f1d4b2ec51cf71
      https://github.com/heimdal/heimdal/commit/0eeba620280da937f15013d398f1d4b2ec51cf71
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  gss fluff


  Commit: 8c799c57c7933e890081de3994e98d8343832b34
      https://github.com/heimdal/heimdal/commit/8c799c57c7933e890081de3994e98d8343832b34
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: 3ebaa0b32b9f6dd0ea0eaadb9700f9779dbf15e0
      https://github.com/heimdal/heimdal/commit/3ebaa0b32b9f6dd0ea0eaadb9700f9779dbf15e0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: 4e74b103e1d053235507e241c740462c1a95b12a
      https://github.com/heimdal/heimdal/commit/4e74b103e1d053235507e241c740462c1a95b12a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: 42f0eca64431e5039a4e5cca831df64468afbfa0
      https://github.com/heimdal/heimdal/commit/42f0eca64431e5039a4e5cca831df64468afbfa0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: ab909eb4200c046d054c3c66893738e72d934b1b
      https://github.com/heimdal/heimdal/commit/ab909eb4200c046d054c3c66893738e72d934b1b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: 7ff341e9ef1a0a4e5e5e1e987f8b5c1515d07204
      https://github.com/heimdal/heimdal/commit/7ff341e9ef1a0a4e5e5e1e987f8b5c1515d07204
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: 69acc722d01f1bdc60da4868a24c5a8cc2d5e263
      https://github.com/heimdal/heimdal/commit/69acc722d01f1bdc60da4868a24c5a8cc2d5e263
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: e86eaf05b016a83c8d8bdadfd61da85c46ae69a8
      https://github.com/heimdal/heimdal/commit/e86eaf05b016a83c8d8bdadfd61da85c46ae69a8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: daea8530217639f38631180b8098ed9023491028
      https://github.com/heimdal/heimdal/commit/daea8530217639f38631180b8098ed9023491028
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: c861dcfe412de92957416c01c8a2b4e5e227a6d5
      https://github.com/heimdal/heimdal/commit/c861dcfe412de92957416c01c8a2b4e5e227a6d5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: 3074c8afc430abf1f574db22229b8570c1e0c02f
      https://github.com/heimdal/heimdal/commit/3074c8afc430abf1f574db22229b8570c1e0c02f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: 07fde78254317b2313e9a393861cec8f69641772
      https://github.com/heimdal/heimdal/commit/07fde78254317b2313e9a393861cec8f69641772
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


  Commit: c441933fc938ebccd26b09a2f5bcec0610214870
      https://github.com/heimdal/heimdal/commit/c441933fc938ebccd26b09a2f5bcec0610214870
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead


  Commit: 7e2f115587beb2f5e90235b19ca2a0ce95ed8c8c
      https://github.com/heimdal/heimdal/commit/7e2f115587beb2f5e90235b19ca2a0ce95ed8c8c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: 886d96b34248d982e325f429332d6dd7991fefa9
      https://github.com/heimdal/heimdal/commit/886d96b34248d982e325f429332d6dd7991fefa9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: 6eb076102c11642a3784dd1a4176d9bc2fb0afd4
      https://github.com/heimdal/heimdal/commit/6eb076102c11642a3784dd1a4176d9bc2fb0afd4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


  Commit: 434deab6ec51591675d4a1821a8b63ea7c98c666
      https://github.com/heimdal/heimdal/commit/434deab6ec51591675d4a1821a8b63ea7c98c666
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx


  Commit: 3ecc7d0bebf9e55194db4864955f8c80d6d17d31
      https://github.com/heimdal/heimdal/commit/3ecc7d0bebf9e55194db4864955f8c80d6d17d31
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: 467f3860f77e8dc07b1db92217c9a0468d448e7a
      https://github.com/heimdal/heimdal/commit/467f3860f77e8dc07b1db92217c9a0468d448e7a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: 4d2a896c5b6473e9560bfa5dac2256ea5f3b95ed
      https://github.com/heimdal/heimdal/commit/4d2a896c5b6473e9560bfa5dac2256ea5f3b95ed
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: 83855c84c5c0aa39eb3fe07bfc9e96966afc6218
      https://github.com/heimdal/heimdal/commit/83855c84c5c0aa39eb3fe07bfc9e96966afc6218
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: 37548e6dc9e9fc5160c81682d28dfa86704e23b3
      https://github.com/heimdal/heimdal/commit/37548e6dc9e9fc5160c81682d28dfa86704e23b3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


  Commit: 4be2a7ecf6bb5933ac56d53fa4ff468115af8705
      https://github.com/heimdal/heimdal/commit/4be2a7ecf6bb5933ac56d53fa4ff468115af8705
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: c0e0d872de1130884d16a91e47fec2e18d2eaee4
      https://github.com/heimdal/heimdal/commit/c0e0d872de1130884d16a91e47fec2e18d2eaee4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: 4f4a9727b67947f4343a0f6d1d920b61eb9aa9a1
      https://github.com/heimdal/heimdal/commit/4f4a9727b67947f4343a0f6d1d920b61eb9aa9a1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: 2b432f661200dc3fcd2dc3d4c2037ee948e488b0
      https://github.com/heimdal/heimdal/commit/2b432f661200dc3fcd2dc3d4c2037ee948e488b0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


  Commit: b0df2f6155a8374ee0a6b404386d4052fe725106
      https://github.com/heimdal/heimdal/commit/b0df2f6155a8374ee0a6b404386d4052fe725106
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: c5dd142ef2a52d72126666a07d1c490b7f6eddf4
      https://github.com/heimdal/heimdal/commit/c5dd142ef2a52d72126666a07d1c490b7f6eddf4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


  Commit: 089395629efe3ea2b5794ae1674b22ce8f9ac4b1
      https://github.com/heimdal/heimdal/commit/089395629efe3ea2b5794ae1674b22ce8f9ac4b1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded


  Commit: 4a51e3778f69e68bae34412fd1a74655fe0ba923
      https://github.com/heimdal/heimdal/commit/4a51e3778f69e68bae34412fd1a74655fe0ba923
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them


  Commit: 9cfccde28fa61e918e3ee0558de25292ba5d271e
      https://github.com/heimdal/heimdal/commit/9cfccde28fa61e918e3ee0558de25292ba5d271e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: b94cfcfc2e8b6b2a279db699c6d35b734a6be95f
      https://github.com/heimdal/heimdal/commit/b94cfcfc2e8b6b2a279db699c6d35b734a6be95f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


  Commit: f7d060c4a7adb631e76daebd6580ffc227e43a5b
      https://github.com/heimdal/heimdal/commit/f7d060c4a7adb631e76daebd6580ffc227e43a5b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  set header to 0 if present


  Commit: ae8701b902c3b6bc916221f35ecaf3648c2dfa6d
      https://github.com/heimdal/heimdal/commit/ae8701b902c3b6bc916221f35ecaf3648c2dfa6d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  salt IV with last 4 bytes of key, make key longer


  Commit: 87a06d179f3b269382fb6c881e346f2f930f15d2
      https://github.com/heimdal/heimdal/commit/87a06d179f3b269382fb6c881e346f2f930f15d2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  Revert "salt IV with last 4 bytes of key, make key longer"

This reverts commit 6f6c86952238a64bdf081b0aa7a3e0631677a1be.


  Commit: f257d2ed284430e4dd8e60118c73ad272276afdb
      https://github.com/heimdal/heimdal/commit/f257d2ed284430e4dd8e60118c73ad272276afdb
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  readability fixes (in theory)


  Commit: e082149c20ea2173b5eda706e29521578389d762
      https://github.com/heimdal/heimdal/commit/e082149c20ea2173b5eda706e29521578389d762
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove some error checking, less code (!)


  Commit: 4eff6020f2c71c1aa5f7a7a78eace0590c98539a
      https://github.com/heimdal/heimdal/commit/4eff6020f2c71c1aa5f7a7a78eace0590c98539a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  propagate MS EC DCE_STYLE bug for AEAD, yay


  Commit: 1316da8758c3ea9575a9dac617d28a1f6ce1f6ec
      https://github.com/heimdal/heimdal/commit/1316da8758c3ea9575a9dac617d28a1f6ce1f6ec
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  check for IV at AEAD API layer


  Commit: 14902e286ed4535637798741ffae50948b483928
      https://github.com/heimdal/heimdal/commit/14902e286ed4535637798741ffae50948b483928
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  code cleanup


  Commit: f6fe87adccbb3136af17ec74e537d20a78d14183
      https://github.com/heimdal/heimdal/commit/f6fe87adccbb3136af17ec74e537d20a78d14183
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  allow AEAD ciphers without F_DERIVED


  Commit: 564e2a4dc441b4a86e06e22c090f8fb96e6e6d9b
      https://github.com/heimdal/heimdal/commit/564e2a4dc441b4a86e06e22c090f8fb96e6e6d9b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  move iov_find to crypto.h


  Commit: b1767643b244baacec7ca83eca6cba2398af573a
      https://github.com/heimdal/heimdal/commit/b1767643b244baacec7ca83eca6cba2398af573a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  use CipherFinal_ex to generate tag


  Commit: 46eab40df6b37647f65df55be7e60ca93851a8d8
      https://github.com/heimdal/heimdal/commit/46eab40df6b37647f65df55be7e60ca93851a8d8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  code cleanup


  Commit: 016275570443ed28e113c1f5aeb076093930f202
      https://github.com/heimdal/heimdal/commit/016275570443ed28e113c1f5aeb076093930f202
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  musings on horrible OpenSSL API


  Commit: 4f3b935f341b276a140439a1663731aedf997a95
      https://github.com/heimdal/heimdal/commit/4f3b935f341b276a140439a1663731aedf997a95
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  simplify


  Commit: 3b166fed07f0e5de200b7dfa8152901c8eb79f5d
      https://github.com/heimdal/heimdal/commit/3b166fed07f0e5de200b7dfa8152901c8eb79f5d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  add some more comments


  Commit: 7617f8b69252dcdf4cc90b4987c739136c3bc2af
      https://github.com/heimdal/heimdal/commit/7617f8b69252dcdf4cc90b4987c739136c3bc2af
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  slighty less bogus overloading of encrypt callback


  Commit: 108efb762b92c97fc2cdd189c06fae88c4f35696
      https://github.com/heimdal/heimdal/commit/108efb762b92c97fc2cdd189c06fae88c4f35696
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  fix typo


  Commit: f05b61ea28577f19f1fb1f0ccdf5d8e5f6df8a3a
      https://github.com/heimdal/heimdal/commit/f05b61ea28577f19f1fb1f0ccdf5d8e5f6df8a3a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  remove extraneous PADL copyright


  Commit: 304f0393ea162e79f28adfa41c44c558dafe6570
      https://github.com/heimdal/heimdal/commit/304f0393ea162e79f28adfa41c44c558dafe6570
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after refactor


  Commit: 67ae70d0b71328df03705bcf7f30bfd201abb1a9
      https://github.com/heimdal/heimdal/commit/67ae70d0b71328df03705bcf7f30bfd201abb1a9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/build_auth.c
    M lib/krb5/context.c
    M lib/krb5/krb5.h

  Log Message:
  -----------
  hide AEAD enctypes unless doing RFC4537


  Commit: fc1393364fd8713454704c08b99e785299e0606b
      https://github.com/heimdal/heimdal/commit/fc1393364fd8713454704c08b99e785299e0606b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M tests/gss/check-context.in

  Log Message:
  -----------
  try to unbreak testsuite


  Commit: c6a1110c51a641f534cec94241a9ed46248302d4
      https://github.com/heimdal/heimdal/commit/c6a1110c51a641f534cec94241a9ed46248302d4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/context.c

  Log Message:
  -----------
  notes


  Commit: 57608622a5401ac6e3734cf0157f82fcbe43ef83
      https://github.com/heimdal/heimdal/commit/57608622a5401ac6e3734cf0157f82fcbe43ef83
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  harmonise with new KDF constants


  Commit: 219e2f637696f5f6baf12ff8817b0083439d6309
      https://github.com/heimdal/heimdal/commit/219e2f637696f5f6baf12ff8817b0083439d6309
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c
    M lib/libedit/config.h.in

  Log Message:
  -----------
  cleanup


  Commit: 62e539c5e6d0c15d65bd3297e635e7f04ba890a8
      https://github.com/heimdal/heimdal/commit/62e539c5e6d0c15d65bd3297e635e7f04ba890a8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-12 (Sat, 12 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add break statement


  Commit: edb7f560b9b5ed56fe8def0884e8808aec0b322d
      https://github.com/heimdal/heimdal/commit/edb7f560b9b5ed56fe8def0884e8808aec0b322d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  ignore zero-length data for AEAD


  Commit: 66cf17317e1f32256faa2035e0774dba81b81af1
      https://github.com/heimdal/heimdal/commit/66cf17317e1f32256faa2035e0774dba81b81af1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  support for  GSS_IOV_BUFFER_TYPE_STREAM


  Commit: d555d2f49e3cba98509b038acaf072b16d35e9cc
      https://github.com/heimdal/heimdal/commit/d555d2f49e3cba98509b038acaf072b16d35e9cc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/gssapi/gssapi.h
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/mech/gss_aeap.c
    M lib/gssapi/test_context.c
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  gss_wrap/gss_unwrap_aead implementation


Compare: https://github.com/heimdal/heimdal/compare/23d73b94ea2b...d555d2f49e3c

From noreply at github.com  Wed Dec 16 09:36:28 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 00:36:28 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 1327c1: unbreak RFC4537
 by only setting enctypes if cred h...
Message-ID: <5671228cd48fb_12c3fe33a1ff2b8533c2@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 1327c11ffa90d086a4bafd53d0a028a2cacdd2f7
      https://github.com/heimdal/heimdal/commit/1327c11ffa90d086a4bafd53d0a028a2cacdd2f7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them



From noreply at github.com  Wed Dec 16 12:27:35 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 03:27:35 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] d0f5db:
	gss_wrap/gss_unwrap_aead implementation
Message-ID: <56714aa7ab253_668a3fcbde7c32bc864e8@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aead-api
  Home:   https://github.com/heimdal/heimdal
  Commit: d0f5dbb08faf9f67732b761c1e207d4e6b2ccc2c
      https://github.com/heimdal/heimdal/commit/d0f5dbb08faf9f67732b761c1e207d4e6b2ccc2c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/gssapi/gssapi.h
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/mech/gss_aeap.c
    M lib/gssapi/test_context.c
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  gss_wrap/gss_unwrap_aead implementation



From noreply at github.com  Wed Dec 16 13:32:30 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 04:32:30 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] bfd72f: gssapi: correct
 OID for GSS_C_PEER_HAS_UPDATED_SPN...
Message-ID: <567159de547a5_24373fc40f8c329c24937@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: bfd72f9ed558003d5810cae9bc3c216543391e7c
      https://github.com/heimdal/heimdal/commit/bfd72f9ed558003d5810cae9bc3c216543391e7c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/mech/gss_oid.c
    M lib/gssapi/oid.txt

  Log Message:
  -----------
  gssapi: correct OID for GSS_C_PEER_HAS_UPDATED_SPNEGO

restore correct OID for GSS_C_PEER_HAS_UPDATED_SPNEGO, this should have no
ABI implications, it's for internal use only. The current OID was incorrectly
copied in commit dbeeb18a, it should belong to 1.3.6.1.4.1.5322.19 which is
... enterprise(1) padl(5322) gssKrb5Extensions(19). The OID we were camping
on belongs to another party.



From noreply at github.com  Wed Dec 16 13:33:07 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 04:33:07 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 5bfaaa: krb5: implement
 draft-ietf-kitten-aes-cts-hmac-sha...
Message-ID: <56715a035df2c_7dd53fa808d492bc1053c3@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 5bfaaa79f0f4ca830b30d98299a9a5319a1c4953
      https://github.com/heimdal/heimdal/commit/5bfaaa79f0f4ca830b30d98299a9a5319a1c4953
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M kdc/kerberos5.c
    M lib/asn1/krb5.asn1
    M lib/hcrypto/evp.h
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/pkcs5.c
    M lib/hcrypto/test_pkcs5.c
    M lib/hcrypto/version-script.map
    M lib/hdb/keys.c
    M lib/hdb/mkey.c
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-sha1.c
    A lib/krb5/crypto-aes-sha2.c
    R lib/krb5/crypto-aes.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/derived-key-test.c
    M lib/krb5/krb5.h
    M lib/krb5/libkrb5-exports.def.in
    A lib/krb5/pseudo-random-test.c
    A lib/krb5/salt-aes-sha1.c
    A lib/krb5/salt-aes-sha2.c
    R lib/krb5/salt-aes.c
    A lib/krb5/sp800-108-kdf.c
    M lib/krb5/test_crypto.c
    M lib/krb5/test_crypto_wrapping.c
    M lib/krb5/test_rfc3961.c
    M lib/krb5/version-script.map

  Log Message:
  -----------
  krb5: implement draft-ietf-kitten-aes-cts-hmac-sha2-07


  Commit: f6433caab8c8c55942b7ce8c988d231b4fb5ddde
      https://github.com/heimdal/heimdal/commit/f6433caab8c8c55942b7ce8c988d231b4fb5ddde
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  slight refactor


  Commit: 20189adfe84b4d331e0c5d3289fcab9240b83475
      https://github.com/heimdal/heimdal/commit/20189adfe84b4d331e0c5d3289fcab9240b83475
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  match temp enctypes with Greg Hudson's MIT branch


  Commit: 2acc5294aa231e613e929ad3d9ede1a5bb0746b5
      https://github.com/heimdal/heimdal/commit/2acc5294aa231e613e929ad3d9ede1a5bb0746b5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  match enctype alias names with Greg Hudson's MIT branch


  Commit: 2060a368a2f4c91bf59fb012807ece4e6d0b30b4
      https://github.com/heimdal/heimdal/commit/2060a368a2f4c91bf59fb012807ece4e6d0b30b4
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/context.c

  Log Message:
  -----------
  add aes-sha2 enctypes to default enctype list


  Commit: 4e18ad336652cc6c35271a35f6b66ec103c1c0e3
      https://github.com/heimdal/heimdal/commit/4e18ad336652cc6c35271a35f6b66ec103c1c0e3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha1.c
    M lib/krb5/crypto-des3.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  factor out KDF selection into separate functions


  Commit: ef974e6c2934406fc2fe9612676d4217d5b2295c
      https://github.com/heimdal/heimdal/commit/ef974e6c2934406fc2fe9612676d4217d5b2295c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  reorder KDFs


  Commit: 0eae43d4216670443e61f6a46ce2de4be3414324
      https://github.com/heimdal/heimdal/commit/0eae43d4216670443e61f6a46ce2de4be3414324
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha1.c
    M lib/krb5/crypto-des3.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  convert big crypto if statement to switch


  Commit: e18ed717383978ca4bb9a5e91fb1c39c8613d764
      https://github.com/heimdal/heimdal/commit/e18ed717383978ca4bb9a5e91fb1c39c8613d764
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  reorder ENC_THEN_CKSUM


  Commit: 7892cdcb455fc7c136ddc4173fcb9d3f984150ac
      https://github.com/heimdal/heimdal/commit/7892cdcb455fc7c136ddc4173fcb9d3f984150ac
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them


Compare: https://github.com/heimdal/heimdal/compare/1327c11ffa90...7892cdcb455f

From noreply at github.com  Thu Dec 17 05:23:25 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 20:23:25 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] ea79b2: temporary
	enctypes
Message-ID: <567238bd317ab_74c13fbb32c2329c667f9@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: ea79b254fa713a97b9a6e0fbcef71bf2b0474987
      https://github.com/heimdal/heimdal/commit/ea79b254fa713a97b9a6e0fbcef71bf2b0474987
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: 6162401f4b1e72bb0458f26933920cbb9b17aacc
      https://github.com/heimdal/heimdal/commit/6162401f4b1e72bb0458f26933920cbb9b17aacc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: 758c37d64db8c136fbb147a2df381e05c220c8f3
      https://github.com/heimdal/heimdal/commit/758c37d64db8c136fbb147a2df381e05c220c8f3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: 9ee1cfa22492530690d17e7b8c9d2a4ec6f8e0b9
      https://github.com/heimdal/heimdal/commit/9ee1cfa22492530690d17e7b8c9d2a4ec6f8e0b9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: 03ce377aa1f11a986229f3c2dabb4b8fddbb6f93
      https://github.com/heimdal/heimdal/commit/03ce377aa1f11a986229f3c2dabb4b8fddbb6f93
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: 38c3fbbfcd92382172d91df867bf0facdd86f819
      https://github.com/heimdal/heimdal/commit/38c3fbbfcd92382172d91df867bf0facdd86f819
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: 4544e5f9464fddbf9af11c651015b96a202b00fd
      https://github.com/heimdal/heimdal/commit/4544e5f9464fddbf9af11c651015b96a202b00fd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: 1b98b9f5fc6ab8cba76cd23211878d61b033bc2c
      https://github.com/heimdal/heimdal/commit/1b98b9f5fc6ab8cba76cd23211878d61b033bc2c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: cace11f88240f1264750b5f75244d3829bcc1741
      https://github.com/heimdal/heimdal/commit/cace11f88240f1264750b5f75244d3829bcc1741
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: b5095f522b979b185a5cfa5f850208c11513e6d5
      https://github.com/heimdal/heimdal/commit/b5095f522b979b185a5cfa5f850208c11513e6d5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  gss fluff


  Commit: c789c077bb8ee15dcc9a459fd7d600a39dc5ad7b
      https://github.com/heimdal/heimdal/commit/c789c077bb8ee15dcc9a459fd7d600a39dc5ad7b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: b68004ef5f87ad1ac297eac52ea12f0d7576b569
      https://github.com/heimdal/heimdal/commit/b68004ef5f87ad1ac297eac52ea12f0d7576b569
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: a856d4ca79a8a0815ccfb347d9c24263cf22bf04
      https://github.com/heimdal/heimdal/commit/a856d4ca79a8a0815ccfb347d9c24263cf22bf04
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: bc4a2ea64cccd8b2e454ae9e1fa4c54f25ffde26
      https://github.com/heimdal/heimdal/commit/bc4a2ea64cccd8b2e454ae9e1fa4c54f25ffde26
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: b2a3af65188e6b3c9177a737227e2e4a8ed8f821
      https://github.com/heimdal/heimdal/commit/b2a3af65188e6b3c9177a737227e2e4a8ed8f821
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: ca942dde7ed71384f878c93da35bbc434a82a23c
      https://github.com/heimdal/heimdal/commit/ca942dde7ed71384f878c93da35bbc434a82a23c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: e46d0c7daa9a3aabc5f5840839267302d3124e76
      https://github.com/heimdal/heimdal/commit/e46d0c7daa9a3aabc5f5840839267302d3124e76
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: be939b5d8fcab8c08e0625d9292772ee3cce4943
      https://github.com/heimdal/heimdal/commit/be939b5d8fcab8c08e0625d9292772ee3cce4943
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: ebecbd2f14602df90835cd525b09e01d70ed743b
      https://github.com/heimdal/heimdal/commit/ebecbd2f14602df90835cd525b09e01d70ed743b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: 7521272bac611e3f449385bebb6aeef8e232a058
      https://github.com/heimdal/heimdal/commit/7521272bac611e3f449385bebb6aeef8e232a058
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: 23d11144066cbc08107a91746026aedbe432fc28
      https://github.com/heimdal/heimdal/commit/23d11144066cbc08107a91746026aedbe432fc28
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: 2ff72c0a7c34dd620521f081043dcdebcd33a033
      https://github.com/heimdal/heimdal/commit/2ff72c0a7c34dd620521f081043dcdebcd33a033
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


  Commit: fc87acd583573747cc2cd1362f053d6adfd68dcf
      https://github.com/heimdal/heimdal/commit/fc87acd583573747cc2cd1362f053d6adfd68dcf
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead


  Commit: 97bcbc8a8e587656343c9c5b89abed2dbbd7904c
      https://github.com/heimdal/heimdal/commit/97bcbc8a8e587656343c9c5b89abed2dbbd7904c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: 876deb6639ec4061619f6496881b752ed06c4671
      https://github.com/heimdal/heimdal/commit/876deb6639ec4061619f6496881b752ed06c4671
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: 1b2bb76ba1f1155890dc114fd16b5c17eddafcab
      https://github.com/heimdal/heimdal/commit/1b2bb76ba1f1155890dc114fd16b5c17eddafcab
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


  Commit: eb569adebeb25ce522832aa3727bb3954e19970f
      https://github.com/heimdal/heimdal/commit/eb569adebeb25ce522832aa3727bb3954e19970f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx


  Commit: 98f1ff8e97d401c8284aa980101e12da1bc34ef9
      https://github.com/heimdal/heimdal/commit/98f1ff8e97d401c8284aa980101e12da1bc34ef9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: 766e91804f702bab5e0f11a4dde4f7326fa94cee
      https://github.com/heimdal/heimdal/commit/766e91804f702bab5e0f11a4dde4f7326fa94cee
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: 5057e76fd79ce236f0dcfdf75e43cae90f8b588e
      https://github.com/heimdal/heimdal/commit/5057e76fd79ce236f0dcfdf75e43cae90f8b588e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: fb368e50ba5f8abe14aeee325d3066bbf9b5b194
      https://github.com/heimdal/heimdal/commit/fb368e50ba5f8abe14aeee325d3066bbf9b5b194
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: 7519df4a4e9e977539a109bc33358ab4fdd599d0
      https://github.com/heimdal/heimdal/commit/7519df4a4e9e977539a109bc33358ab4fdd599d0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


  Commit: f4133340ce11b4c1d33d194ff43b0cd27be742b9
      https://github.com/heimdal/heimdal/commit/f4133340ce11b4c1d33d194ff43b0cd27be742b9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: 93b21e46dca05b1a9cb5b09293165ccd4843f161
      https://github.com/heimdal/heimdal/commit/93b21e46dca05b1a9cb5b09293165ccd4843f161
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: 714e55ada1ba9b9903f3d68bdcf9e55956f7558f
      https://github.com/heimdal/heimdal/commit/714e55ada1ba9b9903f3d68bdcf9e55956f7558f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: 91f01bb6b8981a4878fa17519fe78e9c8ac80da5
      https://github.com/heimdal/heimdal/commit/91f01bb6b8981a4878fa17519fe78e9c8ac80da5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


  Commit: a4af01b048320f90f79584f03ea566a7eb7a3cb6
      https://github.com/heimdal/heimdal/commit/a4af01b048320f90f79584f03ea566a7eb7a3cb6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: c16deacb94ac67bb1561de8bb3689ab666f637b9
      https://github.com/heimdal/heimdal/commit/c16deacb94ac67bb1561de8bb3689ab666f637b9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


  Commit: ee0d2a7692db5f18050be05eb2852f505fb57e24
      https://github.com/heimdal/heimdal/commit/ee0d2a7692db5f18050be05eb2852f505fb57e24
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded


  Commit: 4f008afd9a9fe8436782fc05c873c9fae8d04d55
      https://github.com/heimdal/heimdal/commit/4f008afd9a9fe8436782fc05c873c9fae8d04d55
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: 09115680e30f30a0b87b9cc4cb805b858b47c641
      https://github.com/heimdal/heimdal/commit/09115680e30f30a0b87b9cc4cb805b858b47c641
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


  Commit: 19c6affe6b3546cea9e43fa16c293d3fc2272871
      https://github.com/heimdal/heimdal/commit/19c6affe6b3546cea9e43fa16c293d3fc2272871
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  set header to 0 if present


  Commit: 3413173d98c879fac3e7bb51ba8687f533c3ca42
      https://github.com/heimdal/heimdal/commit/3413173d98c879fac3e7bb51ba8687f533c3ca42
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  salt IV with last 4 bytes of key, make key longer


  Commit: 74ab7effd24e078f5bd6d27340056c5cc73fef54
      https://github.com/heimdal/heimdal/commit/74ab7effd24e078f5bd6d27340056c5cc73fef54
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  Revert "salt IV with last 4 bytes of key, make key longer"

This reverts commit 6f6c86952238a64bdf081b0aa7a3e0631677a1be.


  Commit: 26681775aab8c154f4a3f072ba75f8329aa4f4b2
      https://github.com/heimdal/heimdal/commit/26681775aab8c154f4a3f072ba75f8329aa4f4b2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  readability fixes (in theory)


  Commit: 9b78a3f4586227463afc5e186368ed2cdb7cea1d
      https://github.com/heimdal/heimdal/commit/9b78a3f4586227463afc5e186368ed2cdb7cea1d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove some error checking, less code (!)


  Commit: 686f2f33029c07133d767f6954ee9902f261fc17
      https://github.com/heimdal/heimdal/commit/686f2f33029c07133d767f6954ee9902f261fc17
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  propagate MS EC DCE_STYLE bug for AEAD, yay


  Commit: ea79693cd54451baff1e1879a82a6fa79e7689a3
      https://github.com/heimdal/heimdal/commit/ea79693cd54451baff1e1879a82a6fa79e7689a3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  check for IV at AEAD API layer


  Commit: 10a03cdbdd6506d35c6d9b8185444ee3403b0520
      https://github.com/heimdal/heimdal/commit/10a03cdbdd6506d35c6d9b8185444ee3403b0520
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  code cleanup


  Commit: cd0518e3c7e984b1bdbffa4e979a4d2bf5d78589
      https://github.com/heimdal/heimdal/commit/cd0518e3c7e984b1bdbffa4e979a4d2bf5d78589
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  allow AEAD ciphers without F_DERIVED


  Commit: a12eca7b41543025d8ed898d7e4d24e08434f223
      https://github.com/heimdal/heimdal/commit/a12eca7b41543025d8ed898d7e4d24e08434f223
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  move iov_find to crypto.h


  Commit: da47998902a8a20ff54483ab41c15cf89d119a48
      https://github.com/heimdal/heimdal/commit/da47998902a8a20ff54483ab41c15cf89d119a48
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  use CipherFinal_ex to generate tag


  Commit: bc037a69c16efc87fb09041c2586303cae97e559
      https://github.com/heimdal/heimdal/commit/bc037a69c16efc87fb09041c2586303cae97e559
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  code cleanup


  Commit: eefbe5b9503b40d5143931a21ce623e074674b00
      https://github.com/heimdal/heimdal/commit/eefbe5b9503b40d5143931a21ce623e074674b00
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  musings on horrible OpenSSL API


  Commit: 1fd2ece145f407bb2ad90c2b44b820bb823aa38b
      https://github.com/heimdal/heimdal/commit/1fd2ece145f407bb2ad90c2b44b820bb823aa38b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  simplify


  Commit: 06c78794700efac6492d2ddb191895d16285d542
      https://github.com/heimdal/heimdal/commit/06c78794700efac6492d2ddb191895d16285d542
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  add some more comments


  Commit: 515b9ad75b59922902626c6e16e60d3747fc995e
      https://github.com/heimdal/heimdal/commit/515b9ad75b59922902626c6e16e60d3747fc995e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  slighty less bogus overloading of encrypt callback


  Commit: bbc5cfe39304b6a3572d76f50b2472a619de48ab
      https://github.com/heimdal/heimdal/commit/bbc5cfe39304b6a3572d76f50b2472a619de48ab
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  fix typo


  Commit: d7fc8605a3964fbc71ee4fd7b4ff2899bb591c8d
      https://github.com/heimdal/heimdal/commit/d7fc8605a3964fbc71ee4fd7b4ff2899bb591c8d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  remove extraneous PADL copyright


  Commit: d0cc53867f845ef37095e3d35789a9092b6411b0
      https://github.com/heimdal/heimdal/commit/d0cc53867f845ef37095e3d35789a9092b6411b0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after refactor


  Commit: 9d56da7d5349537d13a3588a67f4fbb9818dd097
      https://github.com/heimdal/heimdal/commit/9d56da7d5349537d13a3588a67f4fbb9818dd097
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/build_auth.c
    M lib/krb5/context.c
    M lib/krb5/krb5.h

  Log Message:
  -----------
  hide AEAD enctypes unless doing RFC4537


  Commit: 5d11bd471969a696de6dc60ddf2503b3325ccf62
      https://github.com/heimdal/heimdal/commit/5d11bd471969a696de6dc60ddf2503b3325ccf62
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M tests/gss/check-context.in

  Log Message:
  -----------
  try to unbreak testsuite


  Commit: 01dc1f9e3b56535cc7a54c2f0c282fda7f3c9b00
      https://github.com/heimdal/heimdal/commit/01dc1f9e3b56535cc7a54c2f0c282fda7f3c9b00
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/context.c

  Log Message:
  -----------
  notes


  Commit: a22e28d84e8f4d07714d1e36d00fd70860c81498
      https://github.com/heimdal/heimdal/commit/a22e28d84e8f4d07714d1e36d00fd70860c81498
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  harmonise with new KDF constants


  Commit: b52bf072b98604c0cf9675d17d73fc93a151eb44
      https://github.com/heimdal/heimdal/commit/b52bf072b98604c0cf9675d17d73fc93a151eb44
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c
    M lib/libedit/config.h.in

  Log Message:
  -----------
  cleanup


  Commit: db83ffdbb253bf6a06ad12b9a337339371f5e887
      https://github.com/heimdal/heimdal/commit/db83ffdbb253bf6a06ad12b9a337339371f5e887
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add break statement


  Commit: 9cb6542f1da75b1178ef89aa6167b7d6e81066c1
      https://github.com/heimdal/heimdal/commit/9cb6542f1da75b1178ef89aa6167b7d6e81066c1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  ignore zero-length data for AEAD


  Commit: 8447aaeed460cf59a46987760220f6c610828f76
      https://github.com/heimdal/heimdal/commit/8447aaeed460cf59a46987760220f6c610828f76
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  support for  GSS_IOV_BUFFER_TYPE_STREAM


  Commit: 667058842b3547e8a49dacb5e3b0b71193c676f3
      https://github.com/heimdal/heimdal/commit/667058842b3547e8a49dacb5e3b0b71193c676f3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-16 (Wed, 16 Dec 2015)

  Changed paths:
    M lib/gssapi/gssapi/gssapi.h
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/mech/gss_aeap.c
    M lib/gssapi/test_context.c
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  gss_wrap/gss_unwrap_aead implementation


  Commit: b3f1aa79e747fe7a1f0ee6d5d899f77d566136cd
      https://github.com/heimdal/heimdal/commit/b3f1aa79e747fe7a1f0ee6d5d899f77d566136cd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  note about future support for longterm AEAD keys


  Commit: d6fe0159292b964ffc9b422209e979ed72df754c
      https://github.com/heimdal/heimdal/commit/d6fe0159292b964ffc9b422209e979ed72df754c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  restrict AEAD usage to GSS-API CFX


Compare: https://github.com/heimdal/heimdal/compare/d555d2f49e3c...d6fe0159292b

From noreply at github.com  Thu Dec 17 05:37:55 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 20:37:55 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 99445e: unbreak aes-test
	by using supported usage
Message-ID: <56723c2373f14_519d3fbe37b4b2b859444@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 99445e7c225fef8cc7be348dd38c165d8047e5ce
      https://github.com/heimdal/heimdal/commit/99445e7c225fef8cc7be348dd38c165d8047e5ce
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  unbreak aes-test by using supported usage



From noreply at github.com  Thu Dec 17 06:05:08 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 21:05:08 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 4f66e8: for
 aes-cts-hmac-sha2, checksum is over OLD ivec
Message-ID: <567242842718c_4a7b3f976db612c0966b7@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 4f66e83602e8bbbd267f69208d5070b8ec5ec4dc
      https://github.com/heimdal/heimdal/commit/4f66e83602e8bbbd267f69208d5070b8ec5ec4dc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  for aes-cts-hmac-sha2, checksum is over OLD ivec


  Commit: bcd76f8b75c072ed3085f6177eb49f2322ed7abe
      https://github.com/heimdal/heimdal/commit/bcd76f8b75c072ed3085f6177eb49f2322ed7abe
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  cleanup, use zero ivec instead of NULL ivec


Compare: https://github.com/heimdal/heimdal/compare/99445e7c225f...bcd76f8b75c0

From noreply at github.com  Thu Dec 17 06:06:14 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 21:06:14 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 3bd7f3: for
 aes-cts-hmac-sha2, checksum is over OLD ivec
Message-ID: <567242c669d12_8473faeba5572bc14138f@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 3bd7f31c4c647d8fdf92cb351d05ac11ee79b52f
      https://github.com/heimdal/heimdal/commit/3bd7f31c4c647d8fdf92cb351d05ac11ee79b52f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  for aes-cts-hmac-sha2, checksum is over OLD ivec


  Commit: d6c28d2df7fc2b9fbf24fce7b1b10ac6413481c5
      https://github.com/heimdal/heimdal/commit/d6c28d2df7fc2b9fbf24fce7b1b10ac6413481c5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH not EVP_MAX_BLOCK_LENGTH


Compare: https://github.com/heimdal/heimdal/compare/7892cdcb455f...d6c28d2df7fc

From noreply at github.com  Thu Dec 17 06:06:36 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 21:06:36 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 9f7d2c: temporary
	enctypes
Message-ID: <567242dcf60_797e3fe4390472b810748@hookshot-fe1-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 9f7d2cf8ef5dfdb4ab4bb3b617654c19501af3cd
      https://github.com/heimdal/heimdal/commit/9f7d2cf8ef5dfdb4ab4bb3b617654c19501af3cd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: 5858b835a503f5a0755df66854fe0413b745ae9f
      https://github.com/heimdal/heimdal/commit/5858b835a503f5a0755df66854fe0413b745ae9f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: faf900f2e30deb19cc1d3cb0b1e4ef5a8252960f
      https://github.com/heimdal/heimdal/commit/faf900f2e30deb19cc1d3cb0b1e4ef5a8252960f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: f934694e7e2a169913dfac83f2d99fedde108376
      https://github.com/heimdal/heimdal/commit/f934694e7e2a169913dfac83f2d99fedde108376
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: 7b4cccb634aa6e4b577c117ab403b00a86cb64a2
      https://github.com/heimdal/heimdal/commit/7b4cccb634aa6e4b577c117ab403b00a86cb64a2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: d771593531fea54f13e757fc2359fec3117ca675
      https://github.com/heimdal/heimdal/commit/d771593531fea54f13e757fc2359fec3117ca675
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: 9e252479ee37b7d200b79f076bc07c9b2aaa5b21
      https://github.com/heimdal/heimdal/commit/9e252479ee37b7d200b79f076bc07c9b2aaa5b21
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: b1448c35a45d02485bc1059887efe4bb5f083d2b
      https://github.com/heimdal/heimdal/commit/b1448c35a45d02485bc1059887efe4bb5f083d2b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: 2bd123d87e6b23973b40bc7409375c5c1871055c
      https://github.com/heimdal/heimdal/commit/2bd123d87e6b23973b40bc7409375c5c1871055c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: 1551832ecedb62d68737fd9a9d337085de966837
      https://github.com/heimdal/heimdal/commit/1551832ecedb62d68737fd9a9d337085de966837
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  gss fluff


  Commit: 2d2a23e813443933ecc31324206b54e4bbff36dd
      https://github.com/heimdal/heimdal/commit/2d2a23e813443933ecc31324206b54e4bbff36dd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: d7b31a04b448b027b674476372822c92def1ed57
      https://github.com/heimdal/heimdal/commit/d7b31a04b448b027b674476372822c92def1ed57
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: 6a2688a1b27f4d15486ffa5d478e18434be38d39
      https://github.com/heimdal/heimdal/commit/6a2688a1b27f4d15486ffa5d478e18434be38d39
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: dd01c61bd52cefb82d12ffb0d70168f89341b567
      https://github.com/heimdal/heimdal/commit/dd01c61bd52cefb82d12ffb0d70168f89341b567
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: 021c86612d2de97265c829d95c48d0ea26466436
      https://github.com/heimdal/heimdal/commit/021c86612d2de97265c829d95c48d0ea26466436
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: a4d0cd450cdf5caac5061fa19f6e89354ac307cb
      https://github.com/heimdal/heimdal/commit/a4d0cd450cdf5caac5061fa19f6e89354ac307cb
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: 049441518ffaa80bd7f5626e7cc3b367fe4a955f
      https://github.com/heimdal/heimdal/commit/049441518ffaa80bd7f5626e7cc3b367fe4a955f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: f97ddd57410e1a62282a309fa3c6060f885fc8a5
      https://github.com/heimdal/heimdal/commit/f97ddd57410e1a62282a309fa3c6060f885fc8a5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: dfba8b44b0cd89eae5a5b8991c03e2469a3cde54
      https://github.com/heimdal/heimdal/commit/dfba8b44b0cd89eae5a5b8991c03e2469a3cde54
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: 35489245b5f0bb018766c65768c5215659051437
      https://github.com/heimdal/heimdal/commit/35489245b5f0bb018766c65768c5215659051437
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: ebc7984b6cab40ac37fe2e4c77d5e02023d8e176
      https://github.com/heimdal/heimdal/commit/ebc7984b6cab40ac37fe2e4c77d5e02023d8e176
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: c9ce7fbcd1522897a1c1527d75012291d28dc3df
      https://github.com/heimdal/heimdal/commit/c9ce7fbcd1522897a1c1527d75012291d28dc3df
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


  Commit: 4115e29299bddcd8ccb41831120469c78cd0e836
      https://github.com/heimdal/heimdal/commit/4115e29299bddcd8ccb41831120469c78cd0e836
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead


  Commit: 4164af9b0da60160bdda5e620719abe91b1893e2
      https://github.com/heimdal/heimdal/commit/4164af9b0da60160bdda5e620719abe91b1893e2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: a2dfbf0df9a6f744d3fc10729678ec8bd89769a6
      https://github.com/heimdal/heimdal/commit/a2dfbf0df9a6f744d3fc10729678ec8bd89769a6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: 34e019d73095c950f1e7f3b9c33dc8abac205bcf
      https://github.com/heimdal/heimdal/commit/34e019d73095c950f1e7f3b9c33dc8abac205bcf
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


  Commit: 4f21692355f6dcd042766b45249009507c6780d5
      https://github.com/heimdal/heimdal/commit/4f21692355f6dcd042766b45249009507c6780d5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx


  Commit: d46d0822f32ffe70461d2839bf4f92016260dd66
      https://github.com/heimdal/heimdal/commit/d46d0822f32ffe70461d2839bf4f92016260dd66
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: 0079a4f695e2fe2f24f6ffabf561062640c6ce21
      https://github.com/heimdal/heimdal/commit/0079a4f695e2fe2f24f6ffabf561062640c6ce21
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: b090089a944b99cf682bf0244be918aa128fa570
      https://github.com/heimdal/heimdal/commit/b090089a944b99cf682bf0244be918aa128fa570
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: 58813808a84e3b594f1d3dabd1abe8da5b2595d5
      https://github.com/heimdal/heimdal/commit/58813808a84e3b594f1d3dabd1abe8da5b2595d5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: b4e78415977ef75ce684f8d1d5ab0619f33f1a65
      https://github.com/heimdal/heimdal/commit/b4e78415977ef75ce684f8d1d5ab0619f33f1a65
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


  Commit: 8e32ee6c4f5bcbcce726895e9c68c537fd626c87
      https://github.com/heimdal/heimdal/commit/8e32ee6c4f5bcbcce726895e9c68c537fd626c87
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: dffdf344068b75608ef77636e900e9a8bb5c1c99
      https://github.com/heimdal/heimdal/commit/dffdf344068b75608ef77636e900e9a8bb5c1c99
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: d7f77a6e6879f598bc248c6243794751b852d184
      https://github.com/heimdal/heimdal/commit/d7f77a6e6879f598bc248c6243794751b852d184
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: 0c0450125638dee832f5d1be70747ecf946aebe3
      https://github.com/heimdal/heimdal/commit/0c0450125638dee832f5d1be70747ecf946aebe3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


  Commit: a1ec0e4957a5ae4a00fc85846c0a2cbac6f6fb7d
      https://github.com/heimdal/heimdal/commit/a1ec0e4957a5ae4a00fc85846c0a2cbac6f6fb7d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: 16660950b2e5105cc3ad0c1be0b8890067b702a3
      https://github.com/heimdal/heimdal/commit/16660950b2e5105cc3ad0c1be0b8890067b702a3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


  Commit: f2b04623c5a5e2af5cc5eecda12323b877f5ed88
      https://github.com/heimdal/heimdal/commit/f2b04623c5a5e2af5cc5eecda12323b877f5ed88
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded


  Commit: f50f874d43de18202f49faa6c4d91f4e8cc7f320
      https://github.com/heimdal/heimdal/commit/f50f874d43de18202f49faa6c4d91f4e8cc7f320
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: e669034c06c45f12582bf46aef4132a8503a1cce
      https://github.com/heimdal/heimdal/commit/e669034c06c45f12582bf46aef4132a8503a1cce
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


  Commit: 213c5e876a59d4c8e5e1150a078f585a3f806c85
      https://github.com/heimdal/heimdal/commit/213c5e876a59d4c8e5e1150a078f585a3f806c85
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  set header to 0 if present


  Commit: 7c5dc50336b5ccbb7089b60fadc1497ca2625a70
      https://github.com/heimdal/heimdal/commit/7c5dc50336b5ccbb7089b60fadc1497ca2625a70
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  salt IV with last 4 bytes of key, make key longer


  Commit: c15e5ff400e730228cc7a312e8f21b2a981ac2e0
      https://github.com/heimdal/heimdal/commit/c15e5ff400e730228cc7a312e8f21b2a981ac2e0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  Revert "salt IV with last 4 bytes of key, make key longer"

This reverts commit 6f6c86952238a64bdf081b0aa7a3e0631677a1be.


  Commit: 69b55ddc3ad69ac155cc1546c32c11f83827236b
      https://github.com/heimdal/heimdal/commit/69b55ddc3ad69ac155cc1546c32c11f83827236b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  readability fixes (in theory)


  Commit: 4aef0f339a97c303092b1918409fe83340cdbfec
      https://github.com/heimdal/heimdal/commit/4aef0f339a97c303092b1918409fe83340cdbfec
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove some error checking, less code (!)


  Commit: b3cd31b1b556e02c49bfaadf427b7cc2b034a467
      https://github.com/heimdal/heimdal/commit/b3cd31b1b556e02c49bfaadf427b7cc2b034a467
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  propagate MS EC DCE_STYLE bug for AEAD, yay


  Commit: 87c5a62c597bace24e7136e18840707db476ef96
      https://github.com/heimdal/heimdal/commit/87c5a62c597bace24e7136e18840707db476ef96
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  check for IV at AEAD API layer


  Commit: 42026e877bf4022a948196eb672bb3282595d205
      https://github.com/heimdal/heimdal/commit/42026e877bf4022a948196eb672bb3282595d205
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  code cleanup


  Commit: 78b11811aa7987cd368fcc7b2b866ea7ad59e685
      https://github.com/heimdal/heimdal/commit/78b11811aa7987cd368fcc7b2b866ea7ad59e685
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  allow AEAD ciphers without F_DERIVED


  Commit: fc7c635b6646583de155a658d9e51155eeb831c2
      https://github.com/heimdal/heimdal/commit/fc7c635b6646583de155a658d9e51155eeb831c2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  move iov_find to crypto.h


  Commit: e05d7a271e8b7cd87cf654546205b16e170cd224
      https://github.com/heimdal/heimdal/commit/e05d7a271e8b7cd87cf654546205b16e170cd224
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  use CipherFinal_ex to generate tag


  Commit: dfa95a0a389852ed253b384ccda4ecc54fd0afcd
      https://github.com/heimdal/heimdal/commit/dfa95a0a389852ed253b384ccda4ecc54fd0afcd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  code cleanup


  Commit: 0de6bfe0c88bb24e3a71cb0047bb545e957a6598
      https://github.com/heimdal/heimdal/commit/0de6bfe0c88bb24e3a71cb0047bb545e957a6598
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  musings on horrible OpenSSL API


  Commit: bdfc67924aa7eaa91e0e8a86266f743f31ba1aa3
      https://github.com/heimdal/heimdal/commit/bdfc67924aa7eaa91e0e8a86266f743f31ba1aa3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  simplify


  Commit: 2ff90ac39a8b492da4bc628c647e6c0792a37091
      https://github.com/heimdal/heimdal/commit/2ff90ac39a8b492da4bc628c647e6c0792a37091
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  add some more comments


  Commit: b36bab68d3453f6806575cb0f8cbabff19d3c657
      https://github.com/heimdal/heimdal/commit/b36bab68d3453f6806575cb0f8cbabff19d3c657
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  slighty less bogus overloading of encrypt callback


  Commit: 51edfa255b485a1e75f1f18715eb559f434893ba
      https://github.com/heimdal/heimdal/commit/51edfa255b485a1e75f1f18715eb559f434893ba
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  fix typo


  Commit: a94e6d09cdf09869203c5130b414ae213e4666a6
      https://github.com/heimdal/heimdal/commit/a94e6d09cdf09869203c5130b414ae213e4666a6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  remove extraneous PADL copyright


  Commit: f8312a843ed0607f8e0147b0065371307c7671dd
      https://github.com/heimdal/heimdal/commit/f8312a843ed0607f8e0147b0065371307c7671dd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after refactor


  Commit: fc65c77dacd6869a1fe231ebe05bbeae0c7fbaa8
      https://github.com/heimdal/heimdal/commit/fc65c77dacd6869a1fe231ebe05bbeae0c7fbaa8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/build_auth.c
    M lib/krb5/context.c
    M lib/krb5/krb5.h

  Log Message:
  -----------
  hide AEAD enctypes unless doing RFC4537


  Commit: 69cadb7e012de8b6eb8969c163aa4274057cce3e
      https://github.com/heimdal/heimdal/commit/69cadb7e012de8b6eb8969c163aa4274057cce3e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M tests/gss/check-context.in

  Log Message:
  -----------
  try to unbreak testsuite


  Commit: 1fd820cccedd974b82d3692fd9b1b1ca09d70585
      https://github.com/heimdal/heimdal/commit/1fd820cccedd974b82d3692fd9b1b1ca09d70585
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/context.c

  Log Message:
  -----------
  notes


  Commit: 5669d3f12e9772a7970c2c7e04e5934fbc245fc3
      https://github.com/heimdal/heimdal/commit/5669d3f12e9772a7970c2c7e04e5934fbc245fc3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  harmonise with new KDF constants


  Commit: ac6eea114c8d3d7300163b4f566a9cfbd4502376
      https://github.com/heimdal/heimdal/commit/ac6eea114c8d3d7300163b4f566a9cfbd4502376
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c
    M lib/libedit/config.h.in

  Log Message:
  -----------
  cleanup


  Commit: 960eb8273db3ef9f7cf2ccb708bc92f62f2d6db8
      https://github.com/heimdal/heimdal/commit/960eb8273db3ef9f7cf2ccb708bc92f62f2d6db8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add break statement


  Commit: 96d0a019cad48638820a3c1937ac5e49e5208cf1
      https://github.com/heimdal/heimdal/commit/96d0a019cad48638820a3c1937ac5e49e5208cf1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  ignore zero-length data for AEAD


  Commit: f10b118f14ea2f77b5446228e1bb18f96b9b61b8
      https://github.com/heimdal/heimdal/commit/f10b118f14ea2f77b5446228e1bb18f96b9b61b8
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  support for  GSS_IOV_BUFFER_TYPE_STREAM


  Commit: b388d9ec0bdf58850b774a5948ef4053e184a129
      https://github.com/heimdal/heimdal/commit/b388d9ec0bdf58850b774a5948ef4053e184a129
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/gssapi/gssapi.h
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/mech/gss_aeap.c
    M lib/gssapi/test_context.c
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  gss_wrap/gss_unwrap_aead implementation


  Commit: d8e7b2784ff6d2a4d2236d1017942001634ccb2d
      https://github.com/heimdal/heimdal/commit/d8e7b2784ff6d2a4d2236d1017942001634ccb2d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  note about future support for longterm AEAD keys


  Commit: eae7fa18b5cacca483b7dca0e9c9bd627213e18f
      https://github.com/heimdal/heimdal/commit/eae7fa18b5cacca483b7dca0e9c9bd627213e18f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  restrict AEAD usage to GSS-API CFX


  Commit: 1ab574488e1e77ba55538676047abd41269dfe4a
      https://github.com/heimdal/heimdal/commit/1ab574488e1e77ba55538676047abd41269dfe4a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  unbreak aes-test by using supported usage


  Commit: 1abae3f9371603e6ee57674cb31858aa157eb235
      https://github.com/heimdal/heimdal/commit/1abae3f9371603e6ee57674cb31858aa157eb235
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  cleanup, use zero ivec instead of NULL ivec


Compare: https://github.com/heimdal/heimdal/compare/bcd76f8b75c0...1abae3f93716

From noreply at github.com  Thu Dec 17 06:23:57 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 21:23:57 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 055f34: checksum old IV
 for aes-cts-hmac-sha2 non-IOV path
Message-ID: <567246ed7569a_38183f86fd47b29c748db@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 055f34d544483ebf3c59ba18207dfd425b248d9d
      https://github.com/heimdal/heimdal/commit/055f34d544483ebf3c59ba18207dfd425b248d9d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  checksum old IV for aes-cts-hmac-sha2 non-IOV path



From noreply at github.com  Thu Dec 17 06:24:14 2015
From: noreply at github.com (GitHub)
Date: Wed, 16 Dec 2015 21:24:14 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 043b22: temporary
	enctypes
Message-ID: <567246fe39a8b_22f73f9efaea52bc6154d@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 043b226d1bbccca47a280bf0c0bda374217f2f89
      https://github.com/heimdal/heimdal/commit/043b226d1bbccca47a280bf0c0bda374217f2f89
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: 5598a4610803f81f2fc35b073e5f07493cc3413b
      https://github.com/heimdal/heimdal/commit/5598a4610803f81f2fc35b073e5f07493cc3413b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: fc33388cae5fa6f48ed9d14e7c789b3869503626
      https://github.com/heimdal/heimdal/commit/fc33388cae5fa6f48ed9d14e7c789b3869503626
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: 01f7424aa43b28ea229eec3d396488642e7f285c
      https://github.com/heimdal/heimdal/commit/01f7424aa43b28ea229eec3d396488642e7f285c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: bdb7dd5f368c1c9e347a7807a15c1ab33dcba7c5
      https://github.com/heimdal/heimdal/commit/bdb7dd5f368c1c9e347a7807a15c1ab33dcba7c5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: edcea0d5e34fe54be64d5580ac40885e94b7686c
      https://github.com/heimdal/heimdal/commit/edcea0d5e34fe54be64d5580ac40885e94b7686c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: 8b18263f356e3e01760d43976d5bff569009ea97
      https://github.com/heimdal/heimdal/commit/8b18263f356e3e01760d43976d5bff569009ea97
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: e75f9e60cb300244a82fb7bce4af2e702642a27e
      https://github.com/heimdal/heimdal/commit/e75f9e60cb300244a82fb7bce4af2e702642a27e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: 4344a17d29716aa6000241a59d262f013a184763
      https://github.com/heimdal/heimdal/commit/4344a17d29716aa6000241a59d262f013a184763
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: d13bca6b3291a9f83d29871092f9ab3c6222ea53
      https://github.com/heimdal/heimdal/commit/d13bca6b3291a9f83d29871092f9ab3c6222ea53
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  gss fluff


  Commit: 9061e1fd2fabe2a6c2a6233a2a4801c69e612f64
      https://github.com/heimdal/heimdal/commit/9061e1fd2fabe2a6c2a6233a2a4801c69e612f64
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: 89a9c02175b861a1100ed6ded21dbc9af9ea6dab
      https://github.com/heimdal/heimdal/commit/89a9c02175b861a1100ed6ded21dbc9af9ea6dab
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: df115761e9bc762ed052b3433182148907e2f878
      https://github.com/heimdal/heimdal/commit/df115761e9bc762ed052b3433182148907e2f878
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: cf48ba1fe20756c02e35e8aa338a00eb8f9c491e
      https://github.com/heimdal/heimdal/commit/cf48ba1fe20756c02e35e8aa338a00eb8f9c491e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: d5218209600acb28d9a2ca5b62dde88d2b53e0a9
      https://github.com/heimdal/heimdal/commit/d5218209600acb28d9a2ca5b62dde88d2b53e0a9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: af1c263f51b5b0e9b3190cd60efe973b07c1a9db
      https://github.com/heimdal/heimdal/commit/af1c263f51b5b0e9b3190cd60efe973b07c1a9db
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: 09a5eb88aab769e7e59ac19fb73df5191bcdcfaa
      https://github.com/heimdal/heimdal/commit/09a5eb88aab769e7e59ac19fb73df5191bcdcfaa
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: b00a16273493e11f9a7c2183bbf172ef46a52b69
      https://github.com/heimdal/heimdal/commit/b00a16273493e11f9a7c2183bbf172ef46a52b69
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: d8d30af34213f54b9b4ca5bc1a8e45662c638e11
      https://github.com/heimdal/heimdal/commit/d8d30af34213f54b9b4ca5bc1a8e45662c638e11
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: 22b7b20042dad0de0cdf23396b9c289b77ab3951
      https://github.com/heimdal/heimdal/commit/22b7b20042dad0de0cdf23396b9c289b77ab3951
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: 7e1e534ef4efb4d489d89db3667764238109cd5b
      https://github.com/heimdal/heimdal/commit/7e1e534ef4efb4d489d89db3667764238109cd5b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: 0d599577681d37ac70e0621eebd2b8cdc3d8703a
      https://github.com/heimdal/heimdal/commit/0d599577681d37ac70e0621eebd2b8cdc3d8703a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


  Commit: c0d584ed3cc6d218810f7cbea3343c03cd7c5886
      https://github.com/heimdal/heimdal/commit/c0d584ed3cc6d218810f7cbea3343c03cd7c5886
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead


  Commit: f3efe2385e2ec9eeec43c1dba73b45ab877abcf9
      https://github.com/heimdal/heimdal/commit/f3efe2385e2ec9eeec43c1dba73b45ab877abcf9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: 4efc14c9a9e125f1a8566eda51b752ee9ab23383
      https://github.com/heimdal/heimdal/commit/4efc14c9a9e125f1a8566eda51b752ee9ab23383
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: 7c6361d6d1ca08387785f427fb835b8726346737
      https://github.com/heimdal/heimdal/commit/7c6361d6d1ca08387785f427fb835b8726346737
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


  Commit: 3368053a988e30931150c3d78998281faa1a98ed
      https://github.com/heimdal/heimdal/commit/3368053a988e30931150c3d78998281faa1a98ed
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx


  Commit: 0ee906b6c4bf64457008d604f8997a45ba668ff9
      https://github.com/heimdal/heimdal/commit/0ee906b6c4bf64457008d604f8997a45ba668ff9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: 10e4694b4891f6c92fe0b192f325f5f0ad9f9dab
      https://github.com/heimdal/heimdal/commit/10e4694b4891f6c92fe0b192f325f5f0ad9f9dab
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: c1863a82cd2b009d96390383b10a16008a772ff1
      https://github.com/heimdal/heimdal/commit/c1863a82cd2b009d96390383b10a16008a772ff1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: c0f30969a61f5b85fb43b0897ddd8b3a3092c0fa
      https://github.com/heimdal/heimdal/commit/c0f30969a61f5b85fb43b0897ddd8b3a3092c0fa
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: 8b61a369a97c7b7420e94dfb9a9cc2010d20b544
      https://github.com/heimdal/heimdal/commit/8b61a369a97c7b7420e94dfb9a9cc2010d20b544
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


  Commit: d3f4caa3d8c6dd145a7d5f7e6dff9ed838fea14b
      https://github.com/heimdal/heimdal/commit/d3f4caa3d8c6dd145a7d5f7e6dff9ed838fea14b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: e7f3521a392b092f681a659a87a0f965a785d9c5
      https://github.com/heimdal/heimdal/commit/e7f3521a392b092f681a659a87a0f965a785d9c5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: 44e18c2cd5d5ae481a5965f2b46467d30192749d
      https://github.com/heimdal/heimdal/commit/44e18c2cd5d5ae481a5965f2b46467d30192749d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: 255cffb6391b58cf1dc49d518694f477fd219481
      https://github.com/heimdal/heimdal/commit/255cffb6391b58cf1dc49d518694f477fd219481
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


  Commit: 57175f84f48957e579e61ab0e6e8fa20ba073f2d
      https://github.com/heimdal/heimdal/commit/57175f84f48957e579e61ab0e6e8fa20ba073f2d
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: cead4412844ab665ad7e32688b894fdc111a30ae
      https://github.com/heimdal/heimdal/commit/cead4412844ab665ad7e32688b894fdc111a30ae
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


  Commit: 2a44020e488bf79ceaceee4a9b3878f904a5def7
      https://github.com/heimdal/heimdal/commit/2a44020e488bf79ceaceee4a9b3878f904a5def7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded


  Commit: 7ebb4546c2b2a3d74bfc6ae0bfe3f85acaff789b
      https://github.com/heimdal/heimdal/commit/7ebb4546c2b2a3d74bfc6ae0bfe3f85acaff789b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: 54981ca54d0529092d08184fa4b6e6ce0b248e21
      https://github.com/heimdal/heimdal/commit/54981ca54d0529092d08184fa4b6e6ce0b248e21
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


  Commit: 562d38724cec958524f3260360fda575caf484b6
      https://github.com/heimdal/heimdal/commit/562d38724cec958524f3260360fda575caf484b6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  set header to 0 if present


  Commit: d7d702c25187666c09d451834412d0d94a48ad8c
      https://github.com/heimdal/heimdal/commit/d7d702c25187666c09d451834412d0d94a48ad8c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  salt IV with last 4 bytes of key, make key longer


  Commit: c810c175d92adf0c53969622974b7ac1b6cda7d3
      https://github.com/heimdal/heimdal/commit/c810c175d92adf0c53969622974b7ac1b6cda7d3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  Revert "salt IV with last 4 bytes of key, make key longer"

This reverts commit 6f6c86952238a64bdf081b0aa7a3e0631677a1be.


  Commit: 5ffc9866a2e827329250b13202b54b49c23c302a
      https://github.com/heimdal/heimdal/commit/5ffc9866a2e827329250b13202b54b49c23c302a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  readability fixes (in theory)


  Commit: 6df87eec0754283a8b61dffd51eba29bd4f9464a
      https://github.com/heimdal/heimdal/commit/6df87eec0754283a8b61dffd51eba29bd4f9464a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove some error checking, less code (!)


  Commit: 49993402cd07b7d0e22426c790d4b796840335aa
      https://github.com/heimdal/heimdal/commit/49993402cd07b7d0e22426c790d4b796840335aa
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  propagate MS EC DCE_STYLE bug for AEAD, yay


  Commit: 83f81c8edb9ea501b1c4b44b91089250a05267e1
      https://github.com/heimdal/heimdal/commit/83f81c8edb9ea501b1c4b44b91089250a05267e1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  check for IV at AEAD API layer


  Commit: 0327f1092067346a341025d58ea4355fe8372eb0
      https://github.com/heimdal/heimdal/commit/0327f1092067346a341025d58ea4355fe8372eb0
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  code cleanup


  Commit: 43a95081d5a5ebeac6e887149be97466752dd353
      https://github.com/heimdal/heimdal/commit/43a95081d5a5ebeac6e887149be97466752dd353
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  allow AEAD ciphers without F_DERIVED


  Commit: 7d3a18dfc3a9c9ac88bf82e89e9a957080cf6944
      https://github.com/heimdal/heimdal/commit/7d3a18dfc3a9c9ac88bf82e89e9a957080cf6944
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  move iov_find to crypto.h


  Commit: eaea7ef256e2a7d0be39c88a79c660694091ffde
      https://github.com/heimdal/heimdal/commit/eaea7ef256e2a7d0be39c88a79c660694091ffde
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  use CipherFinal_ex to generate tag


  Commit: 1de6e6fef332b980d8e2885a87319f18339b0c25
      https://github.com/heimdal/heimdal/commit/1de6e6fef332b980d8e2885a87319f18339b0c25
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  code cleanup


  Commit: c45835f098cd1f8e07e80bb345cc88263d33463e
      https://github.com/heimdal/heimdal/commit/c45835f098cd1f8e07e80bb345cc88263d33463e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  musings on horrible OpenSSL API


  Commit: 725bd594a1c30f65c3d8a1b0b3cd86c397702844
      https://github.com/heimdal/heimdal/commit/725bd594a1c30f65c3d8a1b0b3cd86c397702844
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  simplify


  Commit: 8e37b42710da09bd0cd222a18df484fa15947109
      https://github.com/heimdal/heimdal/commit/8e37b42710da09bd0cd222a18df484fa15947109
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  add some more comments


  Commit: 0cc5c8fe88b4e5428149ee29212f3460e61b3001
      https://github.com/heimdal/heimdal/commit/0cc5c8fe88b4e5428149ee29212f3460e61b3001
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  slighty less bogus overloading of encrypt callback


  Commit: b6d907ffff9221f5fc24e9b96418609f3062d28c
      https://github.com/heimdal/heimdal/commit/b6d907ffff9221f5fc24e9b96418609f3062d28c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  fix typo


  Commit: 6c5ed2b07f4be96359ad130193d0a31d997fa691
      https://github.com/heimdal/heimdal/commit/6c5ed2b07f4be96359ad130193d0a31d997fa691
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  remove extraneous PADL copyright


  Commit: 02453bbdeef2c4b525eceea57936cc57fae73d0c
      https://github.com/heimdal/heimdal/commit/02453bbdeef2c4b525eceea57936cc57fae73d0c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after refactor


  Commit: 08e56839479d958f94fc8c1aeeed3d52914b93b7
      https://github.com/heimdal/heimdal/commit/08e56839479d958f94fc8c1aeeed3d52914b93b7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/build_auth.c
    M lib/krb5/context.c
    M lib/krb5/krb5.h

  Log Message:
  -----------
  hide AEAD enctypes unless doing RFC4537


  Commit: 76981f526cb8b2047bdf0bac7dcd0c1dba9e4a07
      https://github.com/heimdal/heimdal/commit/76981f526cb8b2047bdf0bac7dcd0c1dba9e4a07
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M tests/gss/check-context.in

  Log Message:
  -----------
  try to unbreak testsuite


  Commit: ccbf55867e4f0c11b55ebe33381bb36938368d3e
      https://github.com/heimdal/heimdal/commit/ccbf55867e4f0c11b55ebe33381bb36938368d3e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/context.c

  Log Message:
  -----------
  notes


  Commit: 050e935912ae876e819b26d915b059af3a3edfe6
      https://github.com/heimdal/heimdal/commit/050e935912ae876e819b26d915b059af3a3edfe6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  harmonise with new KDF constants


  Commit: db98f6cee3a467dfccb893ce0bd214d82c107244
      https://github.com/heimdal/heimdal/commit/db98f6cee3a467dfccb893ce0bd214d82c107244
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c
    M lib/libedit/config.h.in

  Log Message:
  -----------
  cleanup


  Commit: 5e3795c061e739c1bfe9853dad44bbe900b6656a
      https://github.com/heimdal/heimdal/commit/5e3795c061e739c1bfe9853dad44bbe900b6656a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add break statement


  Commit: d03391eec6a8febc7a62f12b718b39e382e2b65c
      https://github.com/heimdal/heimdal/commit/d03391eec6a8febc7a62f12b718b39e382e2b65c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  ignore zero-length data for AEAD


  Commit: de8b1a68233e9ab17f689499cfdfb9862aff26c1
      https://github.com/heimdal/heimdal/commit/de8b1a68233e9ab17f689499cfdfb9862aff26c1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  support for  GSS_IOV_BUFFER_TYPE_STREAM


  Commit: 7e32975f5897cb5399d0f8e5f76d96c44ebf136a
      https://github.com/heimdal/heimdal/commit/7e32975f5897cb5399d0f8e5f76d96c44ebf136a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/gssapi/gssapi.h
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/mech/gss_aeap.c
    M lib/gssapi/test_context.c
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  gss_wrap/gss_unwrap_aead implementation


  Commit: 899c1c4bf7294e6f50c18b136c42cd41eb052345
      https://github.com/heimdal/heimdal/commit/899c1c4bf7294e6f50c18b136c42cd41eb052345
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  note about future support for longterm AEAD keys


  Commit: 95ca57b4bffe20a00708d00e57f4731b141ca428
      https://github.com/heimdal/heimdal/commit/95ca57b4bffe20a00708d00e57f4731b141ca428
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  restrict AEAD usage to GSS-API CFX


  Commit: a3679238c667c9fa0343705c96d3d8b5f248193e
      https://github.com/heimdal/heimdal/commit/a3679238c667c9fa0343705c96d3d8b5f248193e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  unbreak aes-test by using supported usage


  Commit: d2bddbb9bed9e404dd6f4f367382635b45a97820
      https://github.com/heimdal/heimdal/commit/d2bddbb9bed9e404dd6f4f367382635b45a97820
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  cleanup, use zero ivec instead of NULL ivec


Compare: https://github.com/heimdal/heimdal/compare/1abae3f93716...d2bddbb9bed9

From noreply at github.com  Thu Dec 17 13:01:01 2015
From: noreply at github.com (GitHub)
Date: Thu, 17 Dec 2015 04:01:01 -0800
Subject: [Heimdal-source-changes] [heimdal/heimdal] 825712: no
	KRB5_CRYPTO_TYPE_HEADER for AEAD
Message-ID: <5672a3fd92983_696d3fad6249b2a010834@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: 825712f37c960565baa17c018e0b4f912a7af18a
      https://github.com/heimdal/heimdal/commit/825712f37c960565baa17c018e0b4f912a7af18a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-17 (Thu, 17 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  no KRB5_CRYPTO_TYPE_HEADER for AEAD

future suppor for long-term keys with AEAD may use the presence of a
KRB5_CRYPTO_TYPE_HEADER to determine whether to derive a new key for
each encryption or not