svn rev #24641: trunk/src/lib/crypto/krb/checksum/

[ghudson@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=24641
Commit By: ghudson
Log Message:
ticket: 6869

Fix a conceptual bug in r24639: the intermediate key container length
should be the hash's output size, not its block size.  (The bug did
not show up in testing because it is harmless in practice; MD5 has a
larger block size than output size.)



Changed Files:
U   trunk/src/lib/crypto/krb/checksum/hmac_md5.c
Modified: trunk/src/lib/crypto/krb/checksum/hmac_md5.c
===================================================================
--- trunk/src/lib/crypto/krb/checksum/hmac_md5.c	2011-02-16 23:34:37 UTC (rev 24640)
+++ trunk/src/lib/crypto/krb/checksum/hmac_md5.c	2011-02-18 15:06:57 UTC (rev 24641)
@@ -52,7 +52,7 @@
         return KRB5_BAD_ENCTYPE;
     if (ctp->ctype == CKSUMTYPE_HMAC_MD5_ARCFOUR) {
 	/* Compute HMAC(key, "signaturekey\0") to get the signing key ks. */
-        ret = alloc_data(&ds, ctp->hash->blocksize);
+        ret = alloc_data(&ds, ctp->hash->hashsize);
 	if (ret != 0)
 	    goto cleanup;