[16794] in Kerberos-V5-bugs
[krbdev.mit.edu #9032] git commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Tue Oct 12 11:07:35 2021
From: "Greg Hudson via RT" <rt-comment@krbdev.mit.edu>
In-Reply-To:
Message-ID: <rt-4.4.3-2-50563-1634051237-745.9032-4-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #9032":;
Date: Tue, 12 Oct 2021 11:07:17 -0400
MIME-Version: 1.0
Reply-To: rt-comment@krbdev.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Tue Oct 12 11:07:17 2021: Request 9032 was acted upon.
Transaction: Ticket created by ghudson@mit.edu
Queue: krb5
Subject: git commit
Owner: ghudson@mit.edu
Requestors:
Status: new
Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9032 >
Always use platform PRNG
Remove the fortuna and device PRNG modules and PRNG modularity, and
move the prng_os implementation into prng.c. Remove the crypto_mod.h
requirement to implement failure-free AES256 and SHA256. Deprecate
krb5_c_random_add_entropy() and krb5_c_random_os_entropy() and remove
their call sites. Deprecate and ignore the -W (weak random) option to
kadmind and kdb5_util create, and stop using it in the test suite.
https://github.com/krb5/krb5/commit/c5b413c3d59725c4e3c9b041e480f102f2188c63
Author: Greg Hudson <ghudson@mit.edu>
Commit: c5b413c3d59725c4e3c9b041e480f102f2188c63
Branch: master
.gitignore | 5 -
doc/build/options2configure.rst | 5 -
doc/mitK5features.rst | 7 -
doc/notice.rst | 30 --
doc/thread-safe.txt | 7 -
src/config/pre.in | 1 -
src/config/win-pre.in | 1 -
src/configure.ac | 12 -
src/include/krb5/krb5.hin | 58 +----
src/kadmin/dbutil/kdb5_create.c | 10 +-
src/kadmin/server/ovsec_kadmd.c | 9 +-
src/kdc/dispatch.c | 31 --
src/kdc/main.c | 17 --
src/lib/crypto/builtin/crypto_mod.h | 3 -
src/lib/crypto/crypto_tests/Makefile.in | 10 +-
src/lib/crypto/crypto_tests/t_prng.c | 90 ------
src/lib/crypto/krb/Makefile.in | 14 -
src/lib/crypto/krb/crypto_int.h | 42 +---
src/lib/crypto/krb/crypto_libinit.c | 5 -
src/lib/crypto/krb/prng.c | 37 ++-
src/lib/crypto/krb/prng_device.c | 99 -------
src/lib/crypto/krb/prng_fortuna.c | 470 -------------------------------
src/lib/crypto/krb/prng_os.c | 72 -----
src/lib/crypto/krb/t_fortuna.c | 179 ------------
src/lib/crypto/krb/t_fortuna.expected | 9 -
src/lib/crypto/libk5crypto.exports | 5 -
src/lib/crypto/openssl/Makefile.in | 9 +-
src/lib/crypto/openssl/crypto_mod.h | 7 -
src/lib/crypto/openssl/stubs.c | 69 -----
src/lib/krb5/krb/gen_save_subkey.c | 15 -
src/lib/krb5/krb/gen_seqnum.c | 14 -
src/lib/krb5/krb/gen_subkey.c | 17 --
src/lib/krb5/krb/init_ctx.c | 17 --
src/lib/krb5/krb/sendauth.c | 23 --
src/tests/t_iprop.py | 2 +-
src/util/k5test.py | 4 +-
36 files changed, 51 insertions(+), 1354 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
