[Heimdal-source-changes] [heimdal/heimdal] e44f79: temporary enctypes

Tis Dec 8 04:56:03 CET 2015

  Branch: refs/heads/lukeh/aes-gcm
  Home:   https://github.com/heimdal/heimdal
  Commit: e44f793d5767c920f461fb792970a721e9d9e0aa
      https://github.com/heimdal/heimdal/commit/e44f793d5767c920f461fb792970a721e9d9e0aa
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  temporary enctypes


  Commit: 7b843b995d3fa98aa07dae61040de22dbec14d33
      https://github.com/heimdal/heimdal/commit/7b843b995d3fa98aa07dae61040de22dbec14d33
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/krb5.h

  Log Message:
  -----------
  temporary enctypes


  Commit: e12a3e1cc5434b54af8b12e5d37dd4248b686352
      https://github.com/heimdal/heimdal/commit/e12a3e1cc5434b54af8b12e5d37dd4248b686352
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  initial aes-gcm implementation


  Commit: 898f06e8bbe6b1e6ec94a50696e53133269a27ed
      https://github.com/heimdal/heimdal/commit/898f06e8bbe6b1e6ec94a50696e53133269a27ed
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto.c

  Log Message:
  -----------
  no string2key for gcm


  Commit: d1410791dc905dd3d25ab296d5c38e851e08d1ee
      https://github.com/heimdal/heimdal/commit/d1410791dc905dd3d25ab296d5c38e851e08d1ee
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  more GCM fixes


  Commit: 0cede91e4a3f6e94bcd8561cf5b833331488b656
      https://github.com/heimdal/heimdal/commit/0cede91e4a3f6e94bcd8561cf5b833331488b656
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  add _krb5_enctype_is_aead private API


  Commit: fa811c9b7eade17c1e3dd9e77941f22d347d84a9
      https://github.com/heimdal/heimdal/commit/fa811c9b7eade17c1e3dd9e77941f22d347d84a9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  zero nonce but feedback MAC into SP800 AEAD KDF


  Commit: 761c7036722071133d9b65465de12f92be6debe3
      https://github.com/heimdal/heimdal/commit/761c7036722071133d9b65465de12f92be6debe3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  use 12 byte nonce for GCM


  Commit: bea3241c9a9a8f61b605858025bd30502ced9ba2
      https://github.com/heimdal/heimdal/commit/bea3241c9a9a8f61b605858025bd30502ced9ba2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  OpenSSL IV length includes ctr, so make it 16 bytes


  Commit: 8261a6edf5fd6b0ba2a2d2de4fd97bafe15fe427
      https://github.com/heimdal/heimdal/commit/8261a6edf5fd6b0ba2a2d2de4fd97bafe15fe427
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  gss fluff


  Commit: f52b75169d883d5d2e4667361fc9a50805abb1cd
      https://github.com/heimdal/heimdal/commit/f52b75169d883d5d2e4667361fc9a50805abb1cd
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  check iv


  Commit: f94f651f4633357324bfda7ace97cefbf1f54e64
      https://github.com/heimdal/heimdal/commit/f94f651f4633357324bfda7ace97cefbf1f54e64
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/accept_sec_context.c
    M lib/gssapi/krb5/cfx.c
    M lib/gssapi/krb5/delete_sec_context.c
    M lib/gssapi/krb5/gsskrb5_locl.h

  Log Message:
  -----------
  more cleanups on AEAD


  Commit: 0763a4771092a5045ac0c8dd055ae6eaa81f2526
      https://github.com/heimdal/heimdal/commit/0763a4771092a5045ac0c8dd055ae6eaa81f2526
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  protect 4121 header implicitly for AEAD


  Commit: 0eb5af61344530c78fa8e15bef27201acf012ba6
      https://github.com/heimdal/heimdal/commit/0eb5af61344530c78fa8e15bef27201acf012ba6
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  CMAC for KDF


  Commit: 16a0cfb51b06f60bf8f62a59c1d580befe28beca
      https://github.com/heimdal/heimdal/commit/16a0cfb51b06f60bf8f62a59c1d580befe28beca
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  fix CMAC


  Commit: 55560b939b29c941cc0e631086c27616962097fc
      https://github.com/heimdal/heimdal/commit/55560b939b29c941cc0e631086c27616962097fc
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  GCM has no string2key


  Commit: 0635f59daf357c5c6a6549917196026315d57496
      https://github.com/heimdal/heimdal/commit/0635f59daf357c5c6a6549917196026315d57496
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  get_mic/verify_mic AEAD


  Commit: e97b10537dc2a6867d3db6bb2199e84943ad3a97
      https://github.com/heimdal/heimdal/commit/e97b10537dc2a6867d3db6bb2199e84943ad3a97
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  fix non-conf wrap for AEAD


  Commit: d0abec5e207ddc084c885dad8626d5c94c8714ed
      https://github.com/heimdal/heimdal/commit/d0abec5e207ddc084c885dad8626d5c94c8714ed
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  don't get KRB5_CRYPTO_TYPE_CHECKSUM for AEAD


  Commit: a8ad88a371daed63f56a6b05c9eee22d2db7db99
      https://github.com/heimdal/heimdal/commit/a8ad88a371daed63f56a6b05c9eee22d2db7db99
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  don't crash if no keyed checksum


  Commit: 3a50a96737f492c1e5d6b5373486501b762e0496
      https://github.com/heimdal/heimdal/commit/3a50a96737f492c1e5d6b5373486501b762e0496
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/asn1/krb5.asn1
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto-evp.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  kill off GMAC checksums


  Commit: 9944d98ef6d409c5cd58295113cd61c5d8dba810
      https://github.com/heimdal/heimdal/commit/9944d98ef6d409c5cd58295113cd61c5d8dba810
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c
    M lib/gssapi/libgssapi-exports.def
    M lib/gssapi/version-script.map

  Log Message:
  -----------
  remove _gsskrb5cfx_max_wrap_length_cfx


  Commit: b56b191520870ecb2dd209c590771b7428bb5c20
      https://github.com/heimdal/heimdal/commit/b56b191520870ecb2dd209c590771b7428bb5c20
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/libkrb5-exports.def.in
    M lib/krb5/version-script.map

  Log Message:
  -----------
  export _krb5_enctype_is_aead


  Commit: b5bee93af6647d2f9ca42147ab2df9f706322db1
      https://github.com/heimdal/heimdal/commit/b5bee93af6647d2f9ca42147ab2df9f706322db1
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  remove GCM test for now


  Commit: 4cf403e1597f5cc0b2fc4aad8a88d2a7962ea232
      https://github.com/heimdal/heimdal/commit/4cf403e1597f5cc0b2fc4aad8a88d2a7962ea232
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  require an IV for GCM


  Commit: 183197a290fa2a0be8e7ed7cf6e2f54b6d0e836f
      https://github.com/heimdal/heimdal/commit/183197a290fa2a0be8e7ed7cf6e2f54b6d0e836f
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    A lib/krb5/crypto-aead.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/crypto-evp.c

  Log Message:
  -----------
  reorganise


  Commit: 1e69d2e79a687bf6b4f497e96faef029f117c2cb
      https://github.com/heimdal/heimdal/commit/1e69d2e79a687bf6b4f497e96faef029f117c2cb
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  actually remove _gsskrb5cfx_wrap_length_cfx


  Commit: a6fb87dbac56c5047317e73e157472cd4f574e71
      https://github.com/heimdal/heimdal/commit/a6fb87dbac56c5047317e73e157472cd4f574e71
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove trailing whitespace


  Commit: ff87f7f6d5b561f2e0aef2814b4f65d517a77980
      https://github.com/heimdal/heimdal/commit/ff87f7f6d5b561f2e0aef2814b4f65d517a77980
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  SIGN_DATA does not protect token header


  Commit: e3431ee36c4d4897406caa225b4edcab98054c67
      https://github.com/heimdal/heimdal/commit/e3431ee36c4d4897406caa225b4edcab98054c67
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  rename back to _krb5_SP800_108_KDF


  Commit: 0d19fc5b66ab34787cee5ccaad68951414d433b2
      https://github.com/heimdal/heimdal/commit/0d19fc5b66ab34787cee5ccaad68951414d433b2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  remove whitespace


  Commit: 5da979221421fd0b9f99b29553e5fcdc608a374c
      https://github.com/heimdal/heimdal/commit/5da979221421fd0b9f99b29553e5fcdc608a374c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/test_context.c

  Log Message:
  -----------
  log session enctype in verbose mode


  Commit: 02fabb4301a245d269f687f0e13dc84706c96551
      https://github.com/heimdal/heimdal/commit/02fabb4301a245d269f687f0e13dc84706c96551
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/test_cfx.c

  Log Message:
  -----------
  _gsskrb5cfx_wrap_length_cfx is really gone


  Commit: b902978277333238e73c598b6ea2b71cde9b440e
      https://github.com/heimdal/heimdal/commit/b902978277333238e73c598b6ea2b71cde9b440e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use aead_crypto test


  Commit: de638bd3cd93e82828edeece14bef88c13beb8e9
      https://github.com/heimdal/heimdal/commit/de638bd3cd93e82828edeece14bef88c13beb8e9
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  remove non-IOV compatibility cruft


  Commit: fe857a96d90468f18437ff7c036803cb33b7a342
      https://github.com/heimdal/heimdal/commit/fe857a96d90468f18437ff7c036803cb33b7a342
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  add GCM tests back


  Commit: 80c9888ca9aafacc71f1ed928ad991e46b076085
      https://github.com/heimdal/heimdal/commit/80c9888ca9aafacc71f1ed928ad991e46b076085
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c

  Log Message:
  -----------
  unbreak DCE_STYLE


  Commit: 6da799daaa112a15b439e6cae692a25db86fdd57
      https://github.com/heimdal/heimdal/commit/6da799daaa112a15b439e6cae692a25db86fdd57
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  cleanup after KDF failure


  Commit: 3094a21b767089d94ee8cf3de877ba3ceb3ea969
      https://github.com/heimdal/heimdal/commit/3094a21b767089d94ee8cf3de877ba3ceb3ea969
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH


  Commit: db72b2389175ab74a174eaa776333acce08374ce
      https://github.com/heimdal/heimdal/commit/db72b2389175ab74a174eaa776333acce08374ce
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto.h

  Log Message:
  -----------
  explain how encrypt has been overloaded


  Commit: beecc666a0e88726b194a8681c2b9a92eb63539a
      https://github.com/heimdal/heimdal/commit/beecc666a0e88726b194a8681c2b9a92eb63539a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them


  Commit: c365d15ee5d097d959a4156bfcf9c63605ad59d3
      https://github.com/heimdal/heimdal/commit/c365d15ee5d097d959a4156bfcf9c63605ad59d3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aes-gcm.c

  Log Message:
  -----------
  ivec never NULL


  Commit: 377e50b9c0295f5f66a8d071653e6ee8169a0719
      https://github.com/heimdal/heimdal/commit/377e50b9c0295f5f66a8d071653e6ee8169a0719
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  make CMAC KDF actually work


  Commit: 21beae10a3a79df38c315fbfa3a6c108cf6376cf
      https://github.com/heimdal/heimdal/commit/21beae10a3a79df38c315fbfa3a6c108cf6376cf
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/krb5/crypto-aead.c

  Log Message:
  -----------
  set header to 0 if present


  Commit: 6f6c86952238a64bdf081b0aa7a3e0631677a1be
      https://github.com/heimdal/heimdal/commit/6f6c86952238a64bdf081b0aa7a3e0631677a1be
  Author: Luke Howard <lukeh at padl.com>
  Date:   2015-12-08 (Tue, 08 Dec 2015)

  Changed paths:
    M lib/gssapi/krb5/cfx.c
    M lib/krb5/crypto-aes-gcm.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  salt IV with last 4 bytes of key, make key longer


Compare: https://github.com/heimdal/heimdal/compare/bc77567e2f22...6f6c86952238