]> git.ipfire.org Git - thirdparty/ntp.git/commitdiff
libntp/a_md5encrypt.c(MD5authencrypt): force CMAC AES 128 key size
authorBrian Inglis <bwi@ntp.org>
Mon, 29 May 2017 18:23:32 +0000 (19:23 +0100)
committerBrian Inglis <bwi@ntp.org>
Mon, 29 May 2017 18:23:32 +0000 (19:23 +0100)
bk: 592c6724jI5OcEZlBdFm84qc9i6jnA

libntp/a_md5encrypt.c

index 01956b3f88d8dcaddba156446e6585d50e1b8789..81320a980e70b3dccee0febec65a540eb9fc2335 100644 (file)
@@ -14,7 +14,8 @@
 
 #ifdef OPENSSL
 # include "openssl/cmac.h"
-# define  CMAC         "AES128CMAC"
+# define  CMAC                 "AES128CMAC"
+# define  AES_128_KEY_SIZE     16
 #endif
 
 /*
@@ -55,7 +56,7 @@ MD5authencrypt(
                msyslog(LOG_ERR, "MAC encrypt: CMAC %s CTX new failed.",   CMAC);
                len = 0;
            } else
-           if (!CMAC_Init(ctx, key, (u_int)cache_secretsize,
+           if (!CMAC_Init(ctx, key, (u_int)AES_128_KEY_SIZE,
                                                EVP_aes_128_cbc(), NULL)) {
                fprintf(stderr,  "MAC encrypt: CMAC %s Init failed.\n",    CMAC);
                msyslog(LOG_ERR, "MAC encrypt: CMAC %s Init failed.",      CMAC);