]> git.ipfire.org Git - thirdparty/krb5.git/commit
Always use platform PRNG 1219/head
authorGreg Hudson <ghudson@mit.edu>
Mon, 27 Sep 2021 17:38:10 +0000 (13:38 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 12 Oct 2021 14:44:07 +0000 (10:44 -0400)
commitc5b413c3d59725c4e3c9b041e480f102f2188c63
treeedf0d26369c0a33ad3b0ac3f3d76d8f792bc6b7f
parentb5efdddd503020c2b64ccf9c30bb09117035f3ce
Always use platform PRNG

Remove the fortuna and device PRNG modules and PRNG modularity, and
move the prng_os implementation into prng.c.  Remove the crypto_mod.h
requirement to implement failure-free AES256 and SHA256.  Deprecate
krb5_c_random_add_entropy() and krb5_c_random_os_entropy() and remove
their call sites.  Deprecate and ignore the -W (weak random) option to
kadmind and kdb5_util create, and stop using it in the test suite.

ticket: 9032 (new)
36 files changed:
.gitignore
doc/build/options2configure.rst
doc/mitK5features.rst
doc/notice.rst
doc/thread-safe.txt
src/config/pre.in
src/config/win-pre.in
src/configure.ac
src/include/krb5/krb5.hin
src/kadmin/dbutil/kdb5_create.c
src/kadmin/server/ovsec_kadmd.c
src/kdc/dispatch.c
src/kdc/main.c
src/lib/crypto/builtin/crypto_mod.h
src/lib/crypto/crypto_tests/Makefile.in
src/lib/crypto/crypto_tests/t_prng.c [deleted file]
src/lib/crypto/krb/Makefile.in
src/lib/crypto/krb/crypto_int.h
src/lib/crypto/krb/crypto_libinit.c
src/lib/crypto/krb/prng.c
src/lib/crypto/krb/prng_device.c [deleted file]
src/lib/crypto/krb/prng_fortuna.c [deleted file]
src/lib/crypto/krb/prng_os.c [deleted file]
src/lib/crypto/krb/t_fortuna.c [deleted file]
src/lib/crypto/krb/t_fortuna.expected [deleted file]
src/lib/crypto/libk5crypto.exports
src/lib/crypto/openssl/Makefile.in
src/lib/crypto/openssl/crypto_mod.h
src/lib/crypto/openssl/stubs.c [deleted file]
src/lib/krb5/krb/gen_save_subkey.c
src/lib/krb5/krb/gen_seqnum.c
src/lib/krb5/krb/gen_subkey.c
src/lib/krb5/krb/init_ctx.c
src/lib/krb5/krb/sendauth.c
src/tests/t_iprop.py
src/util/k5test.py