[krbdev.mit.edu #6589] SVN Commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Nov 30 20:36:43 EST 2009


AES messages never need to be padded because the confounder ensures
that the plaintext is at least one block long.  Remove a check in
krb5int_dk_decrypt_iov which was rejecting short AES messages because
it didn't count the header length.


http://src.mit.edu/fisheye/changelog/krb5/?cs=23397
Commit By: ghudson
Revision: 23397
Changed Files:
U   trunk/src/lib/crypto/krb/dk/dk_aead.c




More information about the krb5-bugs mailing list