krb5_encrpyt_block freeing

Sam Hartman hartmans at MIT.EDU
Thu Dec 29 22:28:43 EST 2005


>>>>> "Paul" == Paul Moore <paul.moore at centrify.com> writes:

    Paul> Is there an API that asks "what is the key size for this
    Paul> encryption mechanism?"

There doesn't seem to be.  You could call krb5_c_make_random_key and see how
large the resulting key is.

There is a mechanism within the library itself, but in general
external keys should probably come from krb5_c_make_random_key or
krb5_c_string_to_key.

Ideally such an API would be provided along with an implementation of
the RFC 3961 random_to_key functionality.




More information about the krbdev mailing list