]> git.ipfire.org Git - thirdparty/krb5.git/commit
Remove support for no-flags SAM-2 preauth
authorRobbie Harwood <rharwood@redhat.com>
Wed, 17 Apr 2019 21:07:46 +0000 (17:07 -0400)
committerGreg Hudson <ghudson@mit.edu>
Wed, 29 May 2019 22:24:13 +0000 (18:24 -0400)
commitc30e0af224ef3716513744fd86aec3eeea90abf9
treea2e347412e262ab72d94da61d319a6a3d6051c2e
parentf5397f358b16a42e570e0a0553099bc58ff799e0
Remove support for no-flags SAM-2 preauth

When neither the send-encrypted-sad nor the use-sad-as-key flag is set
in the SAM-2 challenge, the protocol calls for the AS key to be
combined with the string-to-key of the SAD using a key combination
method which has only been implemented for DES and 3DES enctypes.
Rather than extending key combination, remove support for this case.

[ghudson@mit.edu: rewrote commit message, added comment]

ticket: 8812 (new)
src/lib/krb5/krb/preauth_sam2.c