Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) From: ghudson@mit.edu Subject: SVN Commit X-RT-Original-Encoding: iso-8859-1 Content-Length: 867 Make cipher state chaining work in the OpenSSL back end for des, des3, and arcfour enc providers. Subtleties: * DES and DES3 have checks to avoid clobbering ivec with uninitialized data if there is no data to encrypt. * Arcfour saves the OpenSSL cipher context across calls. To protect against a caller improperly copying the state (which happens to work with other enc providers), a loopback pointer is used, as in GSSAPI. * EVP_EncryptFinal_ex is unnecessary with stream ciphers and would interfere with cipher state chaining if it did anything, so just remove it. https://github.com/krb5/krb5/commit/07fb1e7b435ce005fe629be07d05de912d61307f Commit By: ghudson Revision: 23734 Changed Files: U trunk/src/lib/crypto/openssl/enc_provider/des.c U trunk/src/lib/crypto/openssl/enc_provider/des3.c U trunk/src/lib/crypto/openssl/enc_provider/rc4.c