lib/krb5/crypto.c

87     struct _krb5_encryption_type *et = _krb5_find_enctype(type);
88     if(et == NULL) {
91     *keysize = et->keytype->size;
100     struct _krb5_encryption_type *et = _krb5_find_enctype(type);
101     if(et == NULL) {
104     *keybits = et->keytype->bits;
114     struct _krb5_encryption_type *et = _krb5_find_enctype(type);
115     if(et == NULL) {
118     ret = krb5_data_alloc(&key->keyvalue, et->keytype->size);
122     if(et->keytype->random_key)
123 	(*et->keytype->random_key)(context, key);
135     struct _krb5_encryption_type *et = _krb5_find_enctype(key->key->keytype);
138     if (et == NULL) {
143     kt = et->keytype;
406 	ct = crypto->et->keyed_checksum;
408 	    ct = crypto->et->checksum;
469 	kct = crypto->et->keyed_checksum;
475 				    ct->name, crypto->et->name);
496 				   ct->name, (crypto != NULL)? crypto->et->name : "(none)");
515 			       ct->name, crypto ? crypto->et->name : "(unkeyed)");
560         ct = crypto->et->keyed_checksum;
562             ct = crypto->et->checksum;
798     return (crypto->et->flags & F_DERIVED) != 0;
805     return (crypto->et->flags & F_SPECIAL) != 0;
825     const struct _krb5_encryption_type *et = crypto->et;
827     checksum_sz = CHECKSUMSIZE(et->keyed_checksum);
829     sz = et->confoundersize + len;
830     block_sz = (sz + et->padsize - 1) &~ (et->padsize - 1); /* pad */
839     krb5_generate_random_block(q, et->confoundersize); /* XXX */
840     q += et->confoundersize;
844 			  et->keyed_checksum,
865     ret = (*et->encrypt)(context, dkey, p, block_sz, 1, usage, ivec);
890     const struct _krb5_encryption_type *et = crypto->et;
892     checksum_sz = CHECKSUMSIZE(et->checksum);
894     sz = et->confoundersize + checksum_sz + len;
895     block_sz = (sz + et->padsize - 1) &~ (et->padsize - 1); /* pad */
903     krb5_generate_random_block(q, et->confoundersize); /* XXX */
904     q += et->confoundersize;
910 			  et->checksum,
923     memcpy(p + et->confoundersize, cksum.checksum.data, cksum.checksum.length);
928     ret = (*et->encrypt)(context, &crypto->key, p, block_sz, 1, 0, ivec);
952     struct _krb5_encryption_type *et = crypto->et;
953     size_t cksum_sz = CHECKSUMSIZE(et->checksum);
954     size_t sz = len + cksum_sz + et->confoundersize;
966     krb5_generate_random_block(p, et->confoundersize);
967     p += et->confoundersize;
969     ret = (*et->encrypt)(context, &crypto->key, tmp, sz, TRUE, usage, ivec);
994     struct _krb5_encryption_type *et = crypto->et;
997     checksum_sz = CHECKSUMSIZE(et->keyed_checksum);
998     if (len < checksum_sz + et->confoundersize) {
1005     if (((len - checksum_sz) % et->padsize) != 0) {
1029     ret = (*et->encrypt)(context, dkey, p, len, 0, usage, ivec);
1037     cksum.cksumtype       = CHECKSUMTYPE(et->keyed_checksum);
1049     l = len - et->confoundersize;
1050     memmove(p, p + et->confoundersize, l);
1073     struct _krb5_encryption_type *et = crypto->et;
1075     if ((len % et->padsize) != 0) {
1079     checksum_sz = CHECKSUMSIZE(et->checksum);
1080     if (len < checksum_sz + et->confoundersize) {
1099     ret = (*et->encrypt)(context, &crypto->key, p, len, 0, 0, ivec);
1104     ret = krb5_data_copy(&cksum.checksum, p + et->confoundersize, checksum_sz);
1109     memset(p + et->confoundersize, 0, checksum_sz);
1110     cksum.cksumtype = CHECKSUMTYPE(et->checksum);
1117     l = len - et->confoundersize - checksum_sz;
1118     memmove(p, p + et->confoundersize + checksum_sz, l);
1138     struct _krb5_encryption_type *et = crypto->et;
1139     size_t cksum_sz = CHECKSUMSIZE(et->checksum);
1140     size_t sz = len - cksum_sz - et->confoundersize;
1144     if ((len % et->padsize) != 0) {
1148     if (len < cksum_sz + et->confoundersize) {
1162     ret = (*et->encrypt)(context, &crypto->key, p, len, FALSE, usage, ivec);
1168     memmove (p, p + cksum_sz + et->confoundersize, sz);
1228     const struct _krb5_encryption_type *et = crypto->et;
1241     headersz = et->confoundersize;
1242     trailersz = CHECKSUMSIZE(et->keyed_checksum);
1251     block_sz = (sz + et->padsize - 1) &~ (et->padsize - 1); /* pad */
1311 			  et->keyed_checksum,
1359     ret = (*et->encrypt)(context, dkey, p, block_sz, 1, usage, ivec);
1420     struct _krb5_encryption_type *et = crypto->et;
1428     headersz = et->confoundersize;
1435     trailersz = CHECKSUMSIZE(et->keyed_checksum);
1450     if ((len % et->padsize) != 0) {
1482     ret = (*et->encrypt)(context, dkey, p, len, 0, usage, ivec);
1523     cksum.cksumtype       = CHECKSUMTYPE(et->keyed_checksum);
1635     struct _krb5_encryption_type *et = crypto->et;
1670     cksum.cksumtype = CHECKSUMTYPE(et->keyed_checksum);
1700 	*len = crypto->et->blocksize;
1707 	if (crypto->et->padsize > 1)
1708 	    *len = crypto->et->padsize;
1713 	*len = CHECKSUMSIZE(crypto->et->keyed_checksum);
1716 	if (crypto->et->keyed_checksum)
1717 	    *len = CHECKSUMSIZE(crypto->et->keyed_checksum);
1719 	    *len = CHECKSUMSIZE(crypto->et->checksum);
1844 		 struct _krb5_encryption_type *et,
1852     struct _krb5_key_type *kt = et->keytype;
1857     if(et->blocksize * 8 < kt->bits || len != et->blocksize) {
1858 	nblocks = (kt->bits + et->blocksize * 8 - 1) / (et->blocksize * 8);
1859 	k = malloc(nblocks * et->blocksize);
1865 	ret = _krb5_n_fold(constant, len, k, et->blocksize);
1873 		memcpy(k + i * et->blocksize,
1874 		       k + (i - 1) * et->blocksize,
1875 		       et->blocksize);
1876 	    (*et->encrypt)(context, key, k + i * et->blocksize, et->blocksize,
1890 	(*et->encrypt)(context, key, c, len, 1, 0, NULL);
1909 	_krb5_DES3_random_to_key(context, key->key, k, nblocks * et->blocksize);
1924 	free_key_schedule(context, key, et);
1928 	memset(k, 0, nblocks * et->blocksize);
1957     struct _krb5_encryption_type *et;
1962     et = _krb5_find_enctype (etype);
1963     if (et == NULL) {
1972     ret = _krb5_derive_key(context, et, &d, constant, constant_len);
1975     _krb5_free_key_data(context, &d, et);
2001     _krb5_derive_key(context, crypto->et, d, constant, sizeof(constant));
2038     (*crypto)->et = _krb5_find_enctype(etype);
2039     if((*crypto)->et == NULL || ((*crypto)->et->flags & F_DISABLED)) {
2044     if((*crypto)->et->keytype->size != key->keyvalue.length) {
2069 		  struct _krb5_encryption_type *et)
2071     if (et->keytype->cleanup)
2072 	(*et->keytype->cleanup)(context, key);
2079 	      struct _krb5_encryption_type *et)
2083 	free_key_schedule(context, key, et);
2090 	       struct _krb5_encryption_type *et)
2092     _krb5_free_key_data(context, &ku->key, et);
2113 	free_key_usage(context, &crypto->key_usage[i], crypto->et);
2115     _krb5_free_key_data(context, &crypto->key, crypto->et);
2137     *blocksize = crypto->et->blocksize;
2158     *enctype = crypto->et->type;
2179     *padsize = crypto->et->padsize;
2200     *confoundersize = crypto->et->confoundersize;
2220     struct _krb5_encryption_type *et = _krb5_find_enctype(enctype);
2221     if(et == NULL) {
2228     et->flags |= F_DISABLED;
2247     struct _krb5_encryption_type *et = _krb5_find_enctype(enctype);
2248     if(et == NULL) {
2255     et->flags &= ~F_DISABLED;
2291     struct _krb5_encryption_type *et = crypto->et;
2292     size_t padsize = et->padsize;
2293     size_t checksumsize = CHECKSUMSIZE(et->checksum);
2296     res =  et->confoundersize + checksumsize + data_len;
2306     struct _krb5_encryption_type *et = crypto->et;
2307     size_t padsize = et->padsize;
2310     res =  et->confoundersize + data_len;
2312     if (et->keyed_checksum)
2313 	res += et->keyed_checksum->checksumsize;
2315 	res += et->checksum->checksumsize;
2342     struct _krb5_encryption_type *et = crypto->et;
2345     res = CHECKSUMSIZE(et->checksum);
2346     res += et->confoundersize;
2347     if (et->padsize > 1)
2348 	res += et->padsize;
2356     struct _krb5_encryption_type *et = crypto->et;
2359     if (et->keyed_checksum)
2360 	res = CHECKSUMSIZE(et->keyed_checksum);
2362 	res = CHECKSUMSIZE(et->checksum);
2363     res += et->confoundersize;
2364     if (et->padsize > 1)
2365 	res += et->padsize;
2403     struct _krb5_encryption_type *et = _krb5_find_enctype(type);
2404     if(et == NULL) {
2410     if ((et->keytype->bits + 7) / 8 > size) {
2415 			       et->name, (int)et->keytype->size);
2418     ret = krb5_data_alloc(&key->keyvalue, et->keytype->size);
2422     if (et->keytype->random_to_key)
2423  	(*et->keytype->random_to_key)(context, key, data, size);
2425 	memcpy(key->keyvalue.data, data, et->keytype->size);
2437     struct _krb5_encryption_type *et = _krb5_find_enctype(type);
2439     if(et == NULL || et->prf_length == 0) {
2446     *length = et->prf_length;
2456     struct _krb5_encryption_type *et = crypto->et;
2460     if(et->prf == NULL) {
2463 			       et->name);
2467     return (*et->prf)(context, crypto, input, output);