]> git.ipfire.org Git - thirdparty/krb5.git/commit
Simplify krb5_dbe_def_search_enctype() 972/head
authorGreg Hudson <ghudson@mit.edu>
Thu, 22 Aug 2019 20:19:12 +0000 (16:19 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 27 Aug 2019 05:47:56 +0000 (01:47 -0400)
commitfcfb0e47c995a7e9f956c3716be3175f44ad26e0
tree4e573f42b6332811aa943fd941d8e502a6e9e1c9
parent7196c03f18f14695abeb5ae4923004469b172f0f
Simplify krb5_dbe_def_search_enctype()

Key data is now sorted in descending kvno order (since commit
44ad57d8d38efc944f64536354435f5b721c0ee0) and key enctypes can be
compared with a simple equality test (since single-DES support was
removed in commit fb2dada5eb89c4cd4e39dedd6dbb7dbd5e94f8b8).  Use
these assumptions to simplify krb5_dbe_def_search_enctype().

The rewrite contains one probably-unnoticeable bugfix: if enctype,
salttype, and kvno are all given as -1 in a repeated search, yield all
key entries of permitted enctype, not just entries of the maximum
kvno.
src/lib/kdb/kdb_default.c