From: Brian Inglis <bwi@ntp.org>
Date: Mon, 29 May 2017 19:41:48 +0000 (-0600)
Subject: libntp/a_md5encrypt.c(MD5authdecrypt) force AES 128 key size
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=706d84732b43fb472c596b15a16bda26341bda72;p=thirdparty%2Fntp.git

libntp/a_md5encrypt.c(MD5authdecrypt) force AES 128 key size

bk: 592c797cFaImm64FhY9X9lHuPc8v1Q
---

diff --git a/libntp/a_md5encrypt.c b/libntp/a_md5encrypt.c
index 81320a980..b7bb83145 100644
--- a/libntp/a_md5encrypt.c
+++ b/libntp/a_md5encrypt.c
@@ -178,7 +178,7 @@ MD5authdecrypt(
 		msyslog(LOG_ERR, "MAC decrypt: CMAC %s CTX new failed.",   CMAC);
 		len = 0;
 	    } else
-	    if (!CMAC_Init(ctx, key, (u_int)cache_secretsize,
+	    if (!CMAC_Init(ctx, key, (u_int)AES_128_KEY_SIZE,
 						EVP_aes_128_cbc(), NULL)) {
 		fprintf(stderr,  "MAC decrypt: CMAC %s Init failed.\n",    CMAC);
 		msyslog(LOG_ERR, "MAC decrypt: CMAC %s Init failed.",      CMAC);