[krbdev.mit.edu #8812] git commit

Greg Hudson via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Wed May 29 19:18:55 EDT 2019


Remove support for no-flags SAM-2 preauth

When neither the send-encrypted-sad nor the use-sad-as-key flag is set
in the SAM-2 challenge, the protocol calls for the AS key to be
combined with the string-to-key of the SAD using a key combination
method which has only been implemented for DES and 3DES enctypes.
Rather than extending key combination, remove support for this case.

[ghudson at mit.edu: rewrote commit message, added comment]

https://github.com/krb5/krb5/commit/c30e0af224ef3716513744fd86aec3eeea90abf9
Author: Robbie Harwood <rharwood at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: c30e0af224ef3716513744fd86aec3eeea90abf9
Branch: master
 src/lib/krb5/krb/preauth_sam2.c |   40 ++++++++++----------------------------
 1 files changed, 11 insertions(+), 29 deletions(-)



More information about the krb5-bugs mailing list