]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ksmbd: add support for key exchange
authorNamjae Jeon <linkinjeon@kernel.org>
Mon, 18 Dec 2023 15:32:44 +0000 (00:32 +0900)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 23 Dec 2023 09:41:50 +0000 (10:41 +0100)
commitc5049d2d73b2dc8e6bb64be633250bad1ae3d9ef
tree7c09147d269b2fada59332af64fd9899554fa11c
parent09b4c603831d7e482da66a4c6e41871370343d16
ksmbd: add support for key exchange

[ Upstream commit f9929ef6a2a55f03aac61248c6a3a987b8546f2a ]

When mounting cifs client, can see the following warning message.

CIFS: decode_ntlmssp_challenge: authentication has been weakened as server
does not support key exchange

To remove this warning message, Add support for key exchange feature to
ksmbd. This patch decrypts 16-byte ciphertext value sent by the client
using RC4 with session key. The decrypted value is the recovered secondary
key that will use instead of the session key for signing and sealing.

Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/ksmbd/auth.c