[26119] in CVS-changelog-for-Kerberos-V5
svn rev #25459: branches/krb5-1-9/src/lib/crypto/krb/checksum/
daemon@ATHENA.MIT.EDU (tlyu@mit.edu)
Tue Nov 8 17:16:38 2011
Date: Tue, 8 Nov 2011 17:16:37 -0500
From: tlyu@mit.edu
Message-Id: <201111082216.pA8MGbJU026519@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
http://src.mit.edu/fisheye/changelog/krb5/?cs=25459
Commit By: tlyu
Log Message:
ticket: 7007
subject: Fix intermediate key length in hmac-md5 checksum
version_fixed: 1.9.3
status: resolved
pull up r25418 from trunk
------------------------------------------------------------------------
r25418 | ghudson | 2011-10-28 11:45:03 -0400 (Fri, 28 Oct 2011) | 9 lines
ticket: 6994
subject: Fix intermediate key length in hmac-md5 checksum
target_version: 1.10
tags: pullup
When using hmac-md5, the intermediate key length is the output of the
hash function (128 bits), not the input key length. Relevant if the
input key is not an RC4 key.
Changed Files:
U branches/krb5-1-9/src/lib/crypto/krb/checksum/hmac_md5.c
Modified: branches/krb5-1-9/src/lib/crypto/krb/checksum/hmac_md5.c
===================================================================
--- branches/krb5-1-9/src/lib/crypto/krb/checksum/hmac_md5.c 2011-11-08 20:42:02 UTC (rev 25458)
+++ branches/krb5-1-9/src/lib/crypto/krb/checksum/hmac_md5.c 2011-11-08 22:16:37 UTC (rev 25459)
@@ -61,7 +61,7 @@
ret = krb5int_hmac(ctp->hash, key, &iov, 1, &ds);
if (ret)
goto cleanup;
- ks.length = key->keyblock.length;
+ ks.length = ds.length;
ks.contents = (krb5_octet *) ds.data;
keyblock = &ks;
} else /* For md5-hmac, just use the key. */
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
