lib/hdb/mkey.c

63 		       int kvno, krb5_keyblock *key, krb5_enctype etype,
77     ret = krb5_copy_keyblock_contents(context, key, &(*mkey)->keytab.keyblock);
83     ret = krb5_crypto_init(context, key, etype, &(*mkey)->crypto);
94 hdb_add_master_key(krb5_context context, krb5_keyblock *key,
104     ret = hdb_process_master_key(context, vno, key, 0, &p);
157     krb5_keyblock key;
181 	key.keytype = enctype;
182 	ret = krb5_ret_data(sp, &key.keyvalue);
186     ret = hdb_process_master_key(context, 1, &key, 0, mkey);
187     krb5_free_keyblock_contents(context, &key);
194 /* read an old master key file */
200     krb5_keyblock key;
223     ret = decode_EncryptionKey(buf, len, &key, &ret_len);
233     if(key.keytype == KEYTYPE_DES || key.keytype == ETYPE_DES_CBC_MD5)
234 	key.keytype = ETYPE_DES_CFB64_NONE;
236     ret = hdb_process_master_key(context, 0, &key, 0, mkey);
237     krb5_free_keyblock_contents(context, &key);
247     krb5_keyblock key;
274     memset(&key, 0, sizeof(key));
275     key.keytype = ETYPE_DES_PCBC_NONE;
276     ret = krb5_data_copy(&key.keyvalue, buf, len);
281     ret = hdb_process_master_key(context, 0, &key, 0, mkey);
282     krb5_free_keyblock_contents(context, &key);
299 	filename = HDB_DB_DIR "/m-key";
332        * Check both LittleEndian and BigEndian since they key file
352 	filename = HDB_DB_DIR "/m-key";
391 _hdb_mkey_decrypt(krb5_context context, hdb_master_key key,
395     return krb5_decrypt(context, key->crypto, usage,
400 _hdb_mkey_encrypt(krb5_context context, hdb_master_key key,
404     return krb5_encrypt(context, key->crypto, usage,
416     hdb_master_key key;
421     key = _hdb_find_master_key(k->mkvno, mkey);
423     if (key == NULL)
426     ret = _hdb_mkey_decrypt(context, key, HDB_KU_MKEY,
427 			    k->key.keyvalue.data,
428 			    k->key.keyvalue.length,
431 	/* try to decrypt with MIT key usage */
432 	ret = _hdb_mkey_decrypt(context, key, 0,
433 				k->key.keyvalue.data,
434 				k->key.keyvalue.length,
440     /* fixup keylength if the key got padded when encrypting it */
441     ret = krb5_enctype_keysize(context, k->key.keytype, &keysize);
451     memset(k->key.keyvalue.data, 0, k->key.keyvalue.length);
452     free(k->key.keyvalue.data);
453     k->key.keyvalue = res;
454     k->key.keyvalue.length = keysize;
497     hdb_master_key key;
502     key = _hdb_find_master_key(k->mkvno, mkey);
504     if (key == NULL)
507     ret = _hdb_mkey_encrypt(context, key, HDB_KU_MKEY,
508 			    k->key.keyvalue.data,
509 			    k->key.keyvalue.length,
514     memset(k->key.keyvalue.data, 0, k->key.keyvalue.length);
515     free(k->key.keyvalue.data);
516     k->key.keyvalue = res;
523     *k->mkvno = key->keytab.vno;
563 		    krb5_keyblock *key)
568     ret = hdb_process_master_key(context, 0, key, 0, &mkey);
573     des_set_random_generator_seed(key.keyvalue.data);
584     hdb_master_key key;
587     ret = hdb_read_master_key(context, keyfile, &key);
594     db->hdb_master_key = key;