Pullup to 1.7-branch is only for the test case, as krb5-1.7 behaved correctly for these checksums. Fix regression in MD4-DES and MD5-DES keyed checksums. The original key was being used for the DES encryption, not the "xorkey". (key with each byte XORed with 0xf0) Add a test case that will catch future regressions of this sort, by including a verification of a "known-good" checksum (derived from a known-to-be-interoperable version of the implementation). https://github.com/krb5/krb5/commit/ad2adb977e00181627be7c9a4980b4015fd58fa6 Commit By: tlyu Revision: 23361 Changed Files: U trunk/src/lib/crypto/crypto_tests/Makefile.in U trunk/src/lib/crypto/crypto_tests/t_cksum.c U trunk/src/lib/crypto/krb/keyhash_provider/k5_md4des.c U trunk/src/lib/crypto/krb/keyhash_provider/k5_md5des.c