lib/krb5/crypto.c

55     struct encryption_type *et;
61 #define CRYPTO_ETYPE(C) ((C)->et->type)
145 				  struct encryption_type *et,
613     struct encryption_type *et;
625     et = _find_enctype(enctype);
626     if (et == NULL)
636     ret = krb5_data_alloc(&kd.key->keyvalue, et->keytype->size);
645 				 et->keytype->size, kd.key->keyvalue.data);
652     ret = derive_key(context, et, &kd, "kerberos", strlen("kerberos"));
989     struct encryption_type *et =_find_enctype(enctype);
991     if(et == NULL) {
996     for(st = et->keytype->string_to_key; st && st->type; st++)
1077     struct encryption_type *et = _find_enctype(type);
1078     if(et == NULL) {
1083     *keysize = et->keytype->size;
1092     struct encryption_type *et = _find_enctype(type);
1093     if(et == NULL) {
1098     *keybits = et->keytype->bits;
1108     struct encryption_type *et = _find_enctype(type);
1109     if(et == NULL) {
1114     ret = krb5_data_alloc(&key->keyvalue, et->keytype->size);
1118     if(et->keytype->random_key)
1119 	(*et->keytype->random_key)(context, key);
1131     struct encryption_type *et = _find_enctype(key->key->keytype);
1132     struct key_type *kt = et->keytype;
1878 	ct = crypto->et->keyed_checksum;
1880 	    ct = crypto->et->checksum;
1990         ct = crypto->et->keyed_checksum;
1992             ct = crypto->et->checksum;
2474     struct checksum_type *ct = crypto->et->checksum;
2488     if (result.checksum.length < crypto->et->blocksize)
2493 			  crypto->et->type, "prf", 3, &derived);
2497     ret = krb5_data_alloc(out, crypto->et->blocksize);
2505 			    crypto->et->keytype->bits, &key);
2804     struct encryption_type *et = _find_enctype(etype);
2805     if(et == NULL) {
2810     if(et->oid == NULL) {
2811 	krb5_set_error_string (context, "%s have not oid", et->name);
2815     return der_copy_oid(et->oid, oid);
2978     return (crypto->et->flags & F_DERIVED) != 0;
2985     return (crypto->et->flags & F_SPECIAL) != 0;
3005     const struct encryption_type *et = crypto->et;
3007     checksum_sz = CHECKSUMSIZE(et->keyed_checksum);
3009     sz = et->confoundersize + len;
3010     block_sz = (sz + et->padsize - 1) &~ (et->padsize - 1); /* pad */
3019     krb5_generate_random_block(q, et->confoundersize); /* XXX */
3020     q += et->confoundersize;
3024 			  et->keyed_checksum,
3048     ret = (*et->encrypt)(context, dkey, p, block_sz, 1, usage, ivec);
3073     const struct encryption_type *et = crypto->et;
3075     checksum_sz = CHECKSUMSIZE(et->checksum);
3077     sz = et->confoundersize + checksum_sz + len;
3078     block_sz = (sz + et->padsize - 1) &~ (et->padsize - 1); /* pad */
3086     krb5_generate_random_block(q, et->confoundersize); /* XXX */
3087     q += et->confoundersize;
3093 			  et->checksum,
3106     memcpy(p + et->confoundersize, cksum.checksum.data, cksum.checksum.length);
3114     ret = (*et->encrypt)(context, &crypto->key, p, block_sz, 1, 0, ivec);
3138     struct encryption_type *et = crypto->et;
3139     size_t cksum_sz = CHECKSUMSIZE(et->checksum);
3140     size_t sz = len + cksum_sz + et->confoundersize;
3152     krb5_generate_random_block(p, et->confoundersize);
3153     p += et->confoundersize;
3155     ret = (*et->encrypt)(context, &crypto->key, tmp, sz, TRUE, usage, ivec);
3180     struct encryption_type *et = crypto->et;
3183     checksum_sz = CHECKSUMSIZE(et->keyed_checksum);
3184     if (len < checksum_sz + et->confoundersize) {
3190     if (((len - checksum_sz) % et->padsize) != 0) {
3217     ret = (*et->encrypt)(context, dkey, p, len, 0, usage, ivec);
3225     cksum.cksumtype       = CHECKSUMTYPE(et->keyed_checksum);
3237     l = len - et->confoundersize;
3238     memmove(p, p + et->confoundersize, l);
3261     struct encryption_type *et = crypto->et;
3263     if ((len % et->padsize) != 0) {
3268     checksum_sz = CHECKSUMSIZE(et->checksum);
3284     ret = (*et->encrypt)(context, &crypto->key, p, len, 0, 0, ivec);
3289     ret = krb5_data_copy(&cksum.checksum, p + et->confoundersize, checksum_sz);
3294     memset(p + et->confoundersize, 0, checksum_sz);
3295     cksum.cksumtype = CHECKSUMTYPE(et->checksum);
3302     l = len - et->confoundersize - checksum_sz;
3303     memmove(p, p + et->confoundersize + checksum_sz, l);
3323     struct encryption_type *et = crypto->et;
3324     size_t cksum_sz = CHECKSUMSIZE(et->checksum);
3325     size_t sz = len - cksum_sz - et->confoundersize;
3329     if ((len % et->padsize) != 0) {
3341     ret = (*et->encrypt)(context, &crypto->key, p, len, FALSE, usage, ivec);
3347     memmove (p, p + cksum_sz + et->confoundersize, sz);
3534 	   struct encryption_type *et,
3542     struct key_type *kt = et->keytype;
3547     if(et->blocksize * 8 < kt->bits || len != et->blocksize) {
3548 	nblocks = (kt->bits + et->blocksize * 8 - 1) / (et->blocksize * 8);
3549 	k = malloc(nblocks * et->blocksize);
3554 	ret = _krb5_n_fold(constant, len, k, et->blocksize);
3562 		memcpy(k + i * et->blocksize,
3563 		       k + (i - 1) * et->blocksize,
3564 		       et->blocksize);
3565 	    (*et->encrypt)(context, key, k + i * et->blocksize, et->blocksize,
3578 	(*et->encrypt)(context, key, c, len, 1, 0, NULL);
3597 	DES3_postproc(context, k, nblocks * et->blocksize, key);
3614     memset(k, 0, nblocks * et->blocksize);
3642     struct encryption_type *et;
3647     et = _find_enctype (etype);
3648     if (et == NULL) {
3659     ret = derive_key(context, et, &d, constant, constant_len);
3688     derive_key(context, crypto->et, d, constant, sizeof(constant));
3708     (*crypto)->et = _find_enctype(etype);
3709     if((*crypto)->et == NULL || ((*crypto)->et->flags & F_DISABLED)) {
3716     if((*crypto)->et->keytype->size != key->keyvalue.length) {
3769     *blocksize = crypto->et->blocksize;
3778     *enctype = crypto->et->type;
3787     *padsize = crypto->et->padsize;
3796     *confoundersize = crypto->et->confoundersize;
3804     struct encryption_type *et = _find_enctype(enctype);
3805     if(et == NULL) {
3811     et->flags |= F_DISABLED;
3822     struct encryption_type *et = _find_enctype(etype);
3828     if(et == NULL) {
3833     keylen = et->keytype->bits / 8;
3840     ret = krb5_data_alloc(&kd.key->keyvalue, et->keytype->size);
3863 		     et,
3877     struct encryption_type *et = crypto->et;
3878     size_t padsize = et->padsize;
3879     size_t checksumsize = CHECKSUMSIZE(et->checksum);
3882     res =  et->confoundersize + checksumsize + data_len;
3892     struct encryption_type *et = crypto->et;
3893     size_t padsize = et->padsize;
3896     res =  et->confoundersize + data_len;
3898     if (et->keyed_checksum)
3899 	res += et->keyed_checksum->checksumsize;
3901 	res += et->checksum->checksumsize;
3928     struct encryption_type *et = crypto->et;
3931     res = CHECKSUMSIZE(et->checksum);
3932     res += et->confoundersize;
3933     if (et->padsize > 1)
3934 	res += et->padsize;
3942     struct encryption_type *et = crypto->et;
3945     if (et->keyed_checksum)
3946 	res = CHECKSUMSIZE(et->keyed_checksum);
3948 	res = CHECKSUMSIZE(et->checksum);
3949     res += et->confoundersize;
3950     if (et->padsize > 1)
3951 	res += et->padsize;
3972     struct encryption_type *et = _find_enctype(type);
3973     if(et == NULL) {
3978     if ((et->keytype->bits + 7) / 8 > size) {
3981 			      et->name, (int)et->keytype->size);
3984     ret = krb5_data_alloc(&key->keyvalue, et->keytype->size);
3988     if (et->keytype->random_to_key)
3989  	(*et->keytype->random_to_key)(context, key, data, size);
3991 	memcpy(key->keyvalue.data, data, et->keytype->size);
4005     struct encryption_type *et = _find_enctype(type);
4012     if(et == NULL) {
4017     keylen = (et->keytype->bits + 7) / 8;
4059     struct encryption_type *et = _find_enctype(type);
4061     if(et == NULL || et->prf_length == 0) {
4067     *length = et->prf_length;
4077     struct encryption_type *et = crypto->et;
4081     if(et->prf == NULL) {
4083 			      et->name);
4087     return (*et->prf)(context, crypto, input, output);
4161     derive_key(context, crypto->et, d, constant, sizeof(constant));