wrong key is generated by krb5_c_string_to_key

Benjamin Kaduk kaduk at mit.edu
Tue Jun 6 19:39:18 EDT 2017


On Tue, Jun 06, 2017 at 01:48:58AM -0700, Ashi1986 wrote:
> Thank you very much for the response.
> 
> >manually since its just an md4 hash with no salt, something like:
> ># echo -n password | iconv -t UTF-16LE | openssl dgst -md4
> >And compare with the key in the keytab:
> ># klist -Kekt krb5.keytab 
> 
> I have derived the key manually by using the below command:
> # echo -n password | iconv -t UTF-16LE | openssl dgst -md4
> and the generated key regarding RC4 is same as key generated by KTPASS
> command.
> 
> but the key generated by MIT function krb5_c_string_to_key is different from
> the key generated by KTPASS command.

To confirm, this is the MIT 1.13.2 code that is producing the
inconsistent result?

If so, you might try to apply manually the diff from the commit that
Robbie mentioned already.

-Ben


More information about the Kerberos mailing list