svn rev #25462: branches/krb5-1-8/src/lib/crypto/krb/checksum/

[tlyu@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=25462
Commit By: tlyu
Log Message:
ticket: 7010
subject: Fix intermediate key length in hmac-md5 checksum
version_fixed: 1.8.6
status: resolved

pull up r25418 from trunk

 ------------------------------------------------------------------------
 r25418 | ghudson | 2011-10-28 11:45:03 -0400 (Fri, 28 Oct 2011) | 9 lines

 ticket: 6994
 subject: Fix intermediate key length in hmac-md5 checksum
 target_version: 1.10
 tags: pullup

 When using hmac-md5, the intermediate key length is the output of the
 hash function (128 bits), not the input key length.  Relevant if the
 input key is not an RC4 key.


Changed Files:
U   branches/krb5-1-8/src/lib/crypto/krb/checksum/hmac_md5.c
Modified: branches/krb5-1-8/src/lib/crypto/krb/checksum/hmac_md5.c
===================================================================
--- branches/krb5-1-8/src/lib/crypto/krb/checksum/hmac_md5.c	2011-11-08 22:16:47 UTC (rev 25461)
+++ branches/krb5-1-8/src/lib/crypto/krb/checksum/hmac_md5.c	2011-11-08 22:21:29 UTC (rev 25462)
@@ -61,7 +61,7 @@
 	ret = krb5int_hmac(ctp->hash, key, &iov, 1, &ds);
 	if (ret)
 	    goto cleanup;
-	ks.length = key->keyblock.length;
+        ks.length = ds.length;
 	ks.contents = (krb5_octet *) ds.data;
 	keyblock = &ks;
     } else  /* For md5-hmac, just use the key. */