[Heimdal-source-changes] [heimdal/heimdal] 4b37c2: Make aes-test.c more useful

Fre Apr 15 07:26:32 CEST 2016

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 4b37c27515e8072187987445b09912e28b944d7c
      https://github.com/heimdal/heimdal/commit/4b37c27515e8072187987445b09912e28b944d7c
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/krb5/aes-test.c

  Log Message:
  -----------
  Make aes-test.c more useful

  Commit: c2fafff9927570c239066632cb7302aadc3a07b7
      https://github.com/heimdal/heimdal/commit/c2fafff9927570c239066632cb7302aadc3a07b7
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M include/heim_threads.h

  Log Message:
  -----------
  WIN32 thread primitives must return int

Also, zero return means "success", non-zero means "failure" and the
non-zero value is a system error.  That's how it is for the other
platforms' thread primitives.

(The no-threads defaults are still wrong though, as then are macros that
expand into do..while, which can't be used as expressions and don't
"return" values.)

  Commit: 22934bae7cfbb59c88ef73c0384d9e3d30562be4
      https://github.com/heimdal/heimdal/commit/22934bae7cfbb59c88ef73c0384d9e3d30562be4
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M include/heim_threads.h

  Log Message:
  -----------
  Fix heim_threads.h rwlocks macros for pthreads

  Commit: 9f2642acae08767d4ad846445455be17fccb25c0
      https://github.com/heimdal/heimdal/commit/9f2642acae08767d4ad846445455be17fccb25c0
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/base/test_base.c

  Log Message:
  -----------
  Fix lib/base/test_base rwlock test

  Commit: bfa1d9ba0957bc6275c93b3ce9cb64cc970a2012
      https://github.com/heimdal/heimdal/commit/bfa1d9ba0957bc6275c93b3ce9cb64cc970a2012
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M cf/db.m4

  Log Message:
  -----------
  Remove debug echo in cf/db.m4

  Commit: 2d52e5240127ec99b976f6ebb82991aa223da84e
      https://github.com/heimdal/heimdal/commit/2d52e5240127ec99b976f6ebb82991aa223da84e
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/Makefile.am

  Log Message:
  -----------
  Always build lib/sqlite in maintainer mode

  Commit: d3f9bea491e0be492f874a8e0dd6ff3c64f3433d
      https://github.com/heimdal/heimdal/commit/d3f9bea491e0be492f874a8e0dd6ff3c64f3433d
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/gssapi/ntlm/crypto.c

  Log Message:
  -----------
  Fix lib/gssapi/ntlm/crypto.c includes

  Commit: 1e6f88f721e0cd74af4970cfa5acd0b0e76dfe7e
      https://github.com/heimdal/heimdal/commit/1e6f88f721e0cd74af4970cfa5acd0b0e76dfe7e
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/hcrypto/evp.c

  Log Message:
  -----------
  Fix hcrypto evp_md cleanup call protocol

  Commit: 0b3055fdade4fa77970810036b4eaeac5761daec
      https://github.com/heimdal/heimdal/commit/0b3055fdade4fa77970810036b4eaeac5761daec
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/hcrypto/evp-pkcs11.c

  Log Message:
  -----------
  hcrypto-pkcs11: rc2_cbc is variable length

  Commit: d494f2f679fb655fcc3a111a22cb33369f4e1bf5
      https://github.com/heimdal/heimdal/commit/d494f2f679fb655fcc3a111a22cb33369f4e1bf5
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/hcrypto/evp-pkcs11.c

  Log Message:
  -----------
  hcrypto-pkcs11: fix MD4 block size

  Commit: 0f138cf2d59891bed94dcedcc4fb271e663a2520
      https://github.com/heimdal/heimdal/commit/0f138cf2d59891bed94dcedcc4fb271e663a2520
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/hcrypto/bn.h
    M lib/hcrypto/ec.h
    M lib/hcrypto/engine.h
    M lib/hcrypto/evp.h
    M lib/hcrypto/rsa.h

  Log Message:
  -----------
  Add missing hcrypto rename macros

  Commit: 5c2a3cb25a8b0b1e1701a55c277e8ee165d4ffce
      https://github.com/heimdal/heimdal/commit/5c2a3cb25a8b0b1e1701a55c277e8ee165d4ffce
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M doc/Makefile.am
    M lib/Makefile.am
    M lib/NTMakefile

  Log Message:
  -----------
  Always build hcrypto

  Commit: 8033eb298b1fa363632db0cac9880dfe923fbbdc
      https://github.com/heimdal/heimdal/commit/8033eb298b1fa363632db0cac9880dfe923fbbdc
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/hcrypto/evp.c

  Log Message:
  -----------
  lib/hcrypto/evp.c: missing MD guards

  Commit: 6bbe7f0ffa65251b02cfcc64839775b200d3d0de
      https://github.com/heimdal/heimdal/commit/6bbe7f0ffa65251b02cfcc64839775b200d3d0de
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/hcrypto/evp.c

  Log Message:
  -----------
  Implement EVP_CIPH_CTRL_INIT

  Commit: 9df88205ba69b286ee14b3ad7cb02c053526001d
      https://github.com/heimdal/heimdal/commit/9df88205ba69b286ee14b3ad7cb02c053526001d
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/hx509/crypto.c

  Log Message:
  -----------
  Fix double-free in lib/hx509/crypto.c

  Commit: 490337f4f9a81afdf180d1a56ba83b8513335dbd
      https://github.com/heimdal/heimdal/commit/490337f4f9a81afdf180d1a56ba83b8513335dbd
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M admin/Makefile.am
    M appl/ftp/ftp/Makefile.am
    M appl/otp/Makefile.am
    M appl/su/Makefile.am
    M cf/crypto.m4
    M include/config.h.w32
    M include/crypto-headers.h
    M include/hcrypto/Makefile.am
    M include/heim_threads.h
    M kadmin/Makefile.am
    M kcm/Makefile.am
    M kdc/Makefile.am
    M kdc/NTMakefile
    A kdc/pkinit-ec.c
    M kdc/pkinit.c
    M kpasswd/Makefile.am
    M kuser/Makefile.am
    M lib/NTMakefile
    M lib/base/test_base.c
    M lib/gssapi/Makefile.am
    M lib/gssapi/ntlm/crypto.c
    M lib/hcrypto/Makefile.am
    M lib/hcrypto/NTMakefile
    M lib/hcrypto/bn.h
    M lib/hcrypto/dh.h
    M lib/hcrypto/dsa.h
    M lib/hcrypto/ec.h
    M lib/hcrypto/engine.h
    A lib/hcrypto/evp-openssl.c
    A lib/hcrypto/evp-openssl.h
    M lib/hcrypto/evp-pkcs11.c
    M lib/hcrypto/evp.c
    M lib/hcrypto/evp.h
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/mdtest.c
    M lib/hcrypto/rand.h
    M lib/hcrypto/rsa.h
    M lib/hcrypto/test_cipher.c
    M lib/hcrypto/version-script.map
    M lib/hdb/Makefile.am
    M lib/hx509/Makefile.am
    M lib/hx509/NTMakefile
    A lib/hx509/crypto-ec.c
    M lib/hx509/crypto.c
    M lib/hx509/hx_locl.h
    M lib/hx509/hxtool.c
    M lib/hx509/ks_file.c
    M lib/kafs/Makefile.am
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    M lib/krb5/crypto.h
    M lib/krb5/krb5_locl.h
    A lib/krb5/pkinit-ec.c
    M lib/krb5/pkinit.c
    M lib/ntlm/Makefile.am
    M lib/otp/Makefile.am
    M tools/Makefile.am
    M tools/krb5-config.in
    M windows/NTMakefile.config

  Log Message:
  -----------
  Make OpenSSL an hcrypto backend proper

This adds a new backend for libhcrypto: the OpenSSL backend.

Now libhcrypto has these backends:

 - hcrypto itself (i.e., the algorithms coded in lib/hcrypto)
 - Common Crypto (OS X)
 - PKCS#11 (specifically for Solaris, but not Solaris-specific)
 - Windows CNG (Windows)
 - OpenSSL (generic)

The ./configure --with-openssl=... option no longer disables the use of
hcrypto.  Instead it enables the use of OpenSSL as a (and the default)
backend in libhcrypto.  The libhcrypto framework is now always used.

OpenSSL should no longer be used directly within Heimdal, except in the
OpenSSL hcrypto backend itself, and files where elliptic curve (EC)
crypto is needed.

Because libhcrypto's EC support is incomplete, we can only use OpenSSL
for EC.  Currently that means separating all EC-using code so that it
does not use hcrypto, thus the libhx509/hxtool and PKINIT EC code has
been moved out of the files it used to be in.

  Commit: fca9bc45e22ccbfc47506a7216db9a13ea6fdabf
      https://github.com/heimdal/heimdal/commit/fca9bc45e22ccbfc47506a7216db9a13ea6fdabf
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M cf/crypto.m4

  Log Message:
  -----------
  Add --with-hcrypto-default-backend

  Commit: 2f0c45f7840b66f20b08e1914caee6532dadb768
      https://github.com/heimdal/heimdal/commit/2f0c45f7840b66f20b08e1914caee6532dadb768
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M include/heim_threads.h
    M lib/base/Makefile.am
    M lib/base/NTMakefile
    A lib/base/dll.c
    M lib/base/heimbase.c
    M lib/base/heimbasepriv.h
    M lib/base/version-script.map

  Log Message:
  -----------
  Add thread-locals for WIN32

  Commit: 2cd233db43d0c5696c0e3ffa7f89df28da6369d7
      https://github.com/heimdal/heimdal/commit/2cd233db43d0c5696c0e3ffa7f89df28da6369d7
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M include/heim_threads.h

  Log Message:
  -----------
  Add HEIMDAL_THREAD_create() macros

  Commit: f064f2d14baa91a1c9ce0ff8c15803596ebc493c
      https://github.com/heimdal/heimdal/commit/f064f2d14baa91a1c9ce0ff8c15803596ebc493c
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M lib/hcrypto/rand-unix.c

  Log Message:
  -----------
  Add seed operation for unix RAND method

  Commit: 4a023499d31db923660d785889dce955e1a667c9
      https://github.com/heimdal/heimdal/commit/4a023499d31db923660d785889dce955e1a667c9
  Author: Nicolas Williams <nico at twosigma.com>
  Date:   2016-04-15 (Fri, 15 Apr 2016)

  Changed paths:
    M NEWS

  Log Message:
  -----------
  Update NEWS for some recent changes

 - CVE-2016-2400
 - OpenSSL as hcrypto backend
 - Thread support on Windows
 - HDB LMDB backend
 - iprop revamp

Compare: https://github.com/heimdal/heimdal/compare/15a2537a79ea...4a023499d31d