[krbdev.mit.edu #8345] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Wed Jan 20 15:58:27 EST 2016


Remove nss libk5crypto implementation

Delete the nss libk5crypto implementation because: (1) the original
contributor no longer requires it; (2) as far as we know it is rarely
or never used; (3) NSS has significant impedance mismatch with MIT
krb5's requirements, such as the inability to preserve crypto state
across fork(); (4) NSS cannot do PBKDF2 with SHA-256 or SHA-384, as
will be required for the aes-sha2 enctypes.

https://github.com/krb5/krb5/commit/06ff3b5d3de2e162014eb71ab19d9e545808cacd
Author: Greg Hudson <ghudson at mit.edu>
Commit: 06ff3b5d3de2e162014eb71ab19d9e545808cacd
Branch: master
 doc/build/options2configure.rst               |    7 +-
 doc/mitK5features.rst                         |    1 -
 src/configure.in                              |   24 +-
 src/lib/crypto/crypto_tests/t_fork.c          |   11 +-
 src/lib/crypto/krb/crypto_int.h               |    4 +-
 src/lib/crypto/krb/prng_nss.c                 |   59 --
 src/lib/crypto/nss/Makefile.in                |   49 --
 src/lib/crypto/nss/aes/Makefile.in            |    6 -
 src/lib/crypto/nss/aes/deps                   |    1 -
 src/lib/crypto/nss/camellia/Makefile.in       |    6 -
 src/lib/crypto/nss/camellia/deps              |    1 -
 src/lib/crypto/nss/crypto_mod.h               |   39 --
 src/lib/crypto/nss/deps                       |   46 --
 src/lib/crypto/nss/des/Makefile.in            |   21 -
 src/lib/crypto/nss/des/deps                   |   15 -
 src/lib/crypto/nss/des/des_keys.c             |   87 ---
 src/lib/crypto/nss/enc_provider/Makefile.in   |   39 --
 src/lib/crypto/nss/enc_provider/aes.c         |   99 ----
 src/lib/crypto/nss/enc_provider/camellia.c    |  113 ----
 src/lib/crypto/nss/enc_provider/deps          |   70 ---
 src/lib/crypto/nss/enc_provider/des.c         |   89 ---
 src/lib/crypto/nss/enc_provider/des3.c        |   74 ---
 src/lib/crypto/nss/enc_provider/enc_gen.c     |  730 -------------------------
 src/lib/crypto/nss/enc_provider/rc4.c         |   99 ----
 src/lib/crypto/nss/hash_provider/Makefile.in  |   35 --
 src/lib/crypto/nss/hash_provider/deps         |   63 ---
 src/lib/crypto/nss/hash_provider/hash_crc32.c |   56 --
 src/lib/crypto/nss/hash_provider/hash_gen.c   |   74 ---
 src/lib/crypto/nss/hash_provider/hash_gen.h   |   40 --
 src/lib/crypto/nss/hash_provider/hash_md4.c   |   61 --
 src/lib/crypto/nss/hash_provider/hash_md5.c   |   50 --
 src/lib/crypto/nss/hash_provider/hash_sha1.c  |   50 --
 src/lib/crypto/nss/hmac.c                     |  140 -----
 src/lib/crypto/nss/md4/Makefile.in            |   18 -
 src/lib/crypto/nss/md4/deps                   |   13 -
 src/lib/crypto/nss/md4/md4.c                  |  242 --------
 src/lib/crypto/nss/md4/rsa-md4.h              |   90 ---
 src/lib/crypto/nss/md5/Makefile.in            |    6 -
 src/lib/crypto/nss/md5/deps                   |    1 -
 src/lib/crypto/nss/nss_gen.h                  |  110 ----
 src/lib/crypto/nss/nss_prng.h                 |   36 --
 src/lib/crypto/nss/pbkdf2.c                   |  120 ----
 src/lib/crypto/nss/prng.c                     |   57 --
 src/lib/crypto/nss/sha1/Makefile.in           |    6 -
 src/lib/crypto/nss/sha1/deps                  |    1 -
 src/lib/crypto/nss/sha2/Makefile.in           |    6 -
 src/lib/crypto/nss/sha2/deps                  |    1 -
 src/lib/crypto/nss/stubs.c                    |   68 ---
 48 files changed, 8 insertions(+), 3026 deletions(-)



More information about the krb5-bugs mailing list