]> git.ipfire.org Git - thirdparty/krb5.git/commit
Use OpenSSL CMAC implementation with OpenSSL 3 1212/head
authorGreg Hudson <ghudson@mit.edu>
Tue, 19 Oct 2021 14:42:34 +0000 (10:42 -0400)
committerGreg Hudson <ghudson@mit.edu>
Mon, 15 Nov 2021 18:04:36 +0000 (13:04 -0500)
commitf1b36bb34e16ac423597c292ebfad77aa225de97
tree278816dc494c40700c5ec29e7a6038aff7a246de
parent4963edfac2ef111f3d9e6f39e589d9075a185b51
Use OpenSSL CMAC implementation with OpenSSL 3

Make krb5int_cmac_checksum() a crypto module interface.  Move the
existing CMAC implementation from krb to builtin.  Add an OpenSSL 3
implementation using EVP_MAC.  Only implement Camellia CBC-MAC if
using the builtin CMAC implementation (it uses functions deprecated in
OpenSSL 3).  Switch to using krb5int_camellia_encrypt() for
camellia-test.c since krb5int_camellia_cbc_mac() won't always be
available.
13 files changed:
src/lib/crypto/builtin/Makefile.in
src/lib/crypto/builtin/cmac.c [moved from src/lib/crypto/krb/cmac.c with 99% similarity]
src/lib/crypto/builtin/deps
src/lib/crypto/builtin/enc_provider/camellia.c
src/lib/crypto/crypto_tests/camellia-test.c
src/lib/crypto/krb/Makefile.in
src/lib/crypto/krb/crypto_int.h
src/lib/crypto/krb/deps
src/lib/crypto/libk5crypto.exports
src/lib/crypto/openssl/Makefile.in
src/lib/crypto/openssl/cmac.c [new file with mode: 0644]
src/lib/crypto/openssl/deps
src/lib/crypto/openssl/enc_provider/camellia.c