]> git.ipfire.org Git - thirdparty/krb5.git/commit
Use pre-encoded DH parameter constants in PKINIT 1226/head
authorGreg Hudson <ghudson@mit.edu>
Sat, 23 Oct 2021 20:40:23 +0000 (16:40 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 2 Nov 2021 17:48:27 +0000 (13:48 -0400)
commit9a0575f84e988a23709429f7d4e626db833ab562
tree2de74837f684e0e225771c93c062899a0297bd08
parentd22ed9b9216b35b0bd7cc0bfc9fea37060c273ec
Use pre-encoded DH parameter constants in PKINIT

Rename pkinit_kdf_constants.c to pkinit_constants.c and add encodings
of the three well-known Oakley groups.  Use them to greatly simplify
pkinit_create_td_dh_parameters() and eliminate make_oakley_dh().
Change the interface for decoding parameters to take a krb5_data
pointer for caller convenience.
src/plugins/preauth/pkinit/Makefile.in
src/plugins/preauth/pkinit/pkinit_constants.c [new file with mode: 0644]
src/plugins/preauth/pkinit/pkinit_crypto.h
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c