Skip Menu |
 

From: ghudson@mit.edu
Subject: SVN Commit

krb5_def_fetch_mkey_list was incorrectly filtering mkey_aux entries
when searching the list for an entry which can be decrypted with the
stashed master key. This bug was masked in most cases by the mkvno
heuristic.

Remove the mkvno heuristic, since performance is not an issue for this
rarely-performed operation, and remove the incorrect enctype
comparison in the brute-force search.


https://github.com/krb5/krb5/commit/8b8ccf17352b15c70274fdada0294665a1748195
Commit By: ghudson
Revision: 23677
Changed Files:
U trunk/src/lib/kdb/kdb_default.c
From: tlyu@mit.edu
Subject: SVN Commit

pull up r23677 from trunk

------------------------------------------------------------------------
r23677 | ghudson | 2010-01-28 20:22:17 -0500 (Thu, 28 Jan 2010) | 14 lines

ticket: 6652
subject: Make decryption of master key list more robust
target_version: 1.8
tags: pullup

krb5_def_fetch_mkey_list was incorrectly filtering mkey_aux entries
when searching the list for an entry which can be decrypted with the
stashed master key. This bug was masked in most cases by the mkvno
heuristic.

Remove the mkvno heuristic, since performance is not an issue for this
rarely-performed operation, and remove the incorrect enctype
comparison in the brute-force search.

https://github.com/krb5/krb5/commit/e9a60482b9d92c87a3762dba56a6e34a5d09d790
Commit By: tlyu
Revision: 23711
Changed Files:
U branches/krb5-1-8/src/lib/kdb/kdb_default.c