From noreply at github.com  Wed Jul  6 01:48:49 2016
From: noreply at github.com (GitHub)
Date: Tue, 05 Jul 2016 16:48:49 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] b95cf3: krb5: implement
 draft-ietf-kitten-aes-cts-hmac-sha...
Message-ID: <577c47618f968_2f23fdec501f2a064147@hookshot-fe5-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: b95cf333459beb1ee151a0c93abe85abd297fec2
      https://github.com/heimdal/heimdal/commit/b95cf333459beb1ee151a0c93abe85abd297fec2
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M kdc/kerberos5.c
    M lib/asn1/krb5.asn1
    M lib/hcrypto/evp.h
    M lib/hcrypto/libhcrypto-exports.def
    M lib/hcrypto/pkcs5.c
    M lib/hcrypto/test_pkcs5.c
    M lib/hcrypto/version-script.map
    M lib/hdb/keys.c
    M lib/hdb/mkey.c
    M lib/krb5/Makefile.am
    M lib/krb5/NTMakefile
    M lib/krb5/aes-test.c
    A lib/krb5/crypto-aes-sha1.c
    A lib/krb5/crypto-aes-sha2.c
    R lib/krb5/crypto-aes.c
    M lib/krb5/crypto-algs.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/derived-key-test.c
    M lib/krb5/krb5.h
    M lib/krb5/libkrb5-exports.def.in
    A lib/krb5/pseudo-random-test.c
    A lib/krb5/salt-aes-sha1.c
    A lib/krb5/salt-aes-sha2.c
    R lib/krb5/salt-aes.c
    A lib/krb5/sp800-108-kdf.c
    M lib/krb5/test_crypto.c
    M lib/krb5/test_crypto_wrapping.c
    M lib/krb5/test_rfc3961.c
    M lib/krb5/version-script.map

  Log Message:
  -----------
  krb5: implement draft-ietf-kitten-aes-cts-hmac-sha2-07


  Commit: 3d6a818f69c0f5793b9459520d9339d10528b57e
      https://github.com/heimdal/heimdal/commit/3d6a818f69c0f5793b9459520d9339d10528b57e
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  slight refactor


  Commit: c28537e0906776d0be98f45833758b22f4b3648c
      https://github.com/heimdal/heimdal/commit/c28537e0906776d0be98f45833758b22f4b3648c
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/asn1/krb5.asn1

  Log Message:
  -----------
  match temp enctypes with Greg Hudson's MIT branch


  Commit: 4a69c5a7e616545de28581d81e0ef1e37f8901ff
      https://github.com/heimdal/heimdal/commit/4a69c5a7e616545de28581d81e0ef1e37f8901ff
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c

  Log Message:
  -----------
  match enctype alias names with Greg Hudson's MIT branch


  Commit: 90d51f990846b93140e22527da169d41116a5eea
      https://github.com/heimdal/heimdal/commit/90d51f990846b93140e22527da169d41116a5eea
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/context.c

  Log Message:
  -----------
  add aes-sha2 enctypes to default enctype list


  Commit: 3fd6d4db60c9e392db769c7191c7669b7bfa1b80
      https://github.com/heimdal/heimdal/commit/3fd6d4db60c9e392db769c7191c7669b7bfa1b80
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/crypto-aes-sha1.c
    M lib/krb5/crypto-des3.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  factor out KDF selection into separate functions


  Commit: 2bc244c922d75612a7336757bf4c96660a4aa5d3
      https://github.com/heimdal/heimdal/commit/2bc244c922d75612a7336757bf4c96660a4aa5d3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  reorder KDFs


  Commit: 21cf3595fe5847bad1d408d3d835e1033ce0f6e3
      https://github.com/heimdal/heimdal/commit/21cf3595fe5847bad1d408d3d835e1033ce0f6e3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/crypto-aes-sha1.c
    M lib/krb5/crypto-des3.c
    M lib/krb5/crypto.c
    M lib/krb5/crypto.h

  Log Message:
  -----------
  convert big crypto if statement to switch


  Commit: d750f916b3c961a83c75737d6a178c8c015fbae7
      https://github.com/heimdal/heimdal/commit/d750f916b3c961a83c75737d6a178c8c015fbae7
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  reorder ENC_THEN_CKSUM


  Commit: b0e844f64360edc263b1cad4caf11dc60e330ad3
      https://github.com/heimdal/heimdal/commit/b0e844f64360edc263b1cad4caf11dc60e330ad3
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/gssapi/krb5/init_sec_context.c

  Log Message:
  -----------
  unbreak RFC4537 by only setting enctypes if cred has them


  Commit: f9b7b7b654af95ae53037a3b802818b8fd0886ed
      https://github.com/heimdal/heimdal/commit/f9b7b7b654af95ae53037a3b802818b8fd0886ed
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  for aes-cts-hmac-sha2, checksum is over OLD ivec


  Commit: 75e92a1f81ae8e9d96034c4687f6376d94c3836b
      https://github.com/heimdal/heimdal/commit/75e92a1f81ae8e9d96034c4687f6376d94c3836b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  use EVP_MAX_IV_LENGTH not EVP_MAX_BLOCK_LENGTH


  Commit: 237649028e34474e1d8af4d4e2bb2e665b8546ff
      https://github.com/heimdal/heimdal/commit/237649028e34474e1d8af4d4e2bb2e665b8546ff
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/crypto.c

  Log Message:
  -----------
  checksum old IV for aes-cts-hmac-sha2 non-IOV path


  Commit: 7e4f9f433132611b717c853d732a2b522443a42a
      https://github.com/heimdal/heimdal/commit/7e4f9f433132611b717c853d732a2b522443a42a
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/krb5/crypto-aes-sha2.c
    M lib/krb5/pseudo-random-test.c
    M lib/krb5/sp800-108-kdf.c

  Log Message:
  -----------
  update for draft-ietf-kitten-aes-cts-hmac-sha2-10


Compare: https://github.com/heimdal/heimdal/compare/055f34d54448...7e4f9f433132

From noreply at github.com  Wed Jul  6 08:43:28 2016
From: noreply at github.com (GitHub)
Date: Tue, 05 Jul 2016 23:43:28 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 7ee4e8: unbreak OpenSSL
	hcrypto backend
Message-ID: <577ca89020a5c_1b643fbb2147f2b8134795@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/lukeh/aes-cts-hmac-sha2
  Home:   https://github.com/heimdal/heimdal
  Commit: 7ee4e8c1b898668e8f4701da4a756fccfa7f1bd5
      https://github.com/heimdal/heimdal/commit/7ee4e8c1b898668e8f4701da4a756fccfa7f1bd5
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/hcrypto/undef.h

  Log Message:
  -----------
  unbreak OpenSSL hcrypto backend


  Commit: 45de19a7f4e16806804c04efc568e58699dc9c10
      https://github.com/heimdal/heimdal/commit/45de19a7f4e16806804c04efc568e58699dc9c10
  Author: Luke Howard <lukeh at padl.com>
  Date:   2016-07-06 (Wed, 06 Jul 2016)

  Changed paths:
    M lib/hdb/keys.c

  Log Message:
  -----------
  unbreak rebase to master in hdb


Compare: https://github.com/heimdal/heimdal/compare/7e4f9f433132...45de19a7f4e1

From noreply at github.com  Fri Jul  8 05:01:08 2016
From: noreply at github.com (GitHub)
Date: Thu, 07 Jul 2016 20:01:08 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 2d3298: Fix slave
 boostrap from incomplete master log
Message-ID: <577f177476031_b9e3f92faa6d2a0176815@hookshot-fe6-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 2d32982ed4e1a2b2881cb9bb85556802d94f9c93
      https://github.com/heimdal/heimdal/commit/2d32982ed4e1a2b2881cb9bb85556802d94f9c93
  Author: Viktor Dukhovni <viktor at twosigma.com>
  Date:   2016-07-07 (Thu, 07 Jul 2016)

  Changed paths:
    M lib/kadm5/ipropd_master.c

  Log Message:
  -----------
  Fix slave boostrap from incomplete master log

When the master's log does not contain the complete history, slaves
that bootstrap from scratch encountered a loop, because the master
falsely assumed a race with log truncation.



From noreply at github.com  Sun Jul 17 06:46:28 2016
From: noreply at github.com (GitHub)
Date: Sat, 16 Jul 2016 21:46:28 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 623407: add missing
	principal types
Message-ID: <578b0da47ef94_2a2e3fa2940a929c49574@hookshot-fe2-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 6234073499faf579739160c4635871a17237a9c4
      https://github.com/heimdal/heimdal/commit/6234073499faf579739160c4635871a17237a9c4
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2016-07-17 (Sun, 17 Jul 2016)

  Changed paths:
    M lib/asn1/krb5.asn1
    M lib/krb5/principal.c

  Log Message:
  -----------
  add missing principal types

Add the WELLKNOWN and NT-HST-DOMAIN principal types to the nametype
table and asn.1

Change-Id: Ife9c3860f375bac1a06152b0d261c63ec071a763



From noreply at github.com  Thu Jul 21 21:02:12 2016
From: noreply at github.com (GitHub)
Date: Thu, 21 Jul 2016 12:02:12 -0700
Subject: [Heimdal-source-changes] [heimdal/heimdal] 54e85a: Remove duplicate
 symbols from libroken version-scr...
Message-ID: <57911c34da5ed_17dd3f7f9c9a32a01320f9@hookshot-fe3-cp1-prd.iad.github.net.mail>

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: 54e85ad0995a982f28daeb31f7e4dd0f33a81a0f
      https://github.com/heimdal/heimdal/commit/54e85ad0995a982f28daeb31f7e4dd0f33a81a0f
  Author: Ed Maste <emaste at freebsd.org>
  Date:   2016-07-21 (Thu, 21 Jul 2016)

  Changed paths:
    M lib/roken/version-script.map

  Log Message:
  -----------
  Remove duplicate symbols from libroken version-script.map

Commit efed5633 (r24759) prefixed some symbols with rk_, but
introduced 6 duplicate symbols in the version script (because the
rk_-prefixed versions of the symbols were already present).


  Commit: 8ef0071d960ff29dc2dcc80cc80dc4b65d25c7f0
      https://github.com/heimdal/heimdal/commit/8ef0071d960ff29dc2dcc80cc80dc4b65d25c7f0
  Author: Ed Maste <emaste at freebsd.org>
  Date:   2016-07-21 (Thu, 21 Jul 2016)

  Changed paths:
    M lib/hx509/version-script.map

  Log Message:
  -----------
  Remove duplicate symbols from libhx509 version-script.map

Commit 7758a5d0 (r21331) added semiprivate function
_hx509_request_to_pkcs10 twice.


  Commit: c7ed0b719d354c6e206311ba93d8f5ae95f78fe7
      https://github.com/heimdal/heimdal/commit/c7ed0b719d354c6e206311ba93d8f5ae95f78fe7
  Author: Love Hörnquist Åstrand <lha at h5l.org>
  Date:   2016-07-21 (Thu, 21 Jul 2016)

  Changed paths:
    M lib/hx509/version-script.map
    M lib/roken/version-script.map

  Log Message:
  -----------
  Merge pull request #185 from emaste/master

Remove duplicate symbols from libroken version-script.map


Compare: https://github.com/heimdal/heimdal/compare/6234073499fa...c7ed0b719d35