svn rev #25418: trunk/src/lib/crypto/krb/

[ghudson@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=25418
Commit By: ghudson
Log Message:
ticket: 6994
subject: Fix intermediate key length in hmac-md5 checksum
target_version: 1.10
tags: pullup

When using hmac-md5, the intermediate key length is the output of the
hash function (128 bits), not the input key length.  Relevant if the
input key is not an RC4 key.


Changed Files:
U   trunk/src/lib/crypto/krb/checksum_hmac_md5.c
Modified: trunk/src/lib/crypto/krb/checksum_hmac_md5.c
===================================================================
--- trunk/src/lib/crypto/krb/checksum_hmac_md5.c	2011-10-26 22:34:21 UTC (rev 25417)
+++ trunk/src/lib/crypto/krb/checksum_hmac_md5.c	2011-10-28 15:45:03 UTC (rev 25418)
@@ -59,7 +59,7 @@
         ret = krb5int_hmac(ctp->hash, key, &iov, 1, &ds);
         if (ret)
             goto cleanup;
-        ks.length = key->keyblock.length;
+        ks.length = ds.length;
         ks.contents = (krb5_octet *) ds.data;
         keyblock = &ks;
     } else  /* For md5-hmac, just use the key. */