RC4 has a header length that includes the confounder and checksum.

The trailer length is 0 git-svn-id: svn://anonsvn.mit.edu/krb5/branches/mskrb-integ-crypto-iov@21234 dc483132-0cff-0310-8789-dd5450dbe970
aadamowski · Dec 1, 2008 · 609c4c2 · 609c4c2
1 parent e67ce6d
commit 609c4c2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/lib/crypto/arcfour/arcfour_aead.c b/src/lib/crypto/arcfour/arcfour_aead.c
@@ -41,12 +41,14 @@ krb5int_arcfour_crypto_length(const struct krb5_aead_provider *aead,
 {
     switch (type) {
     case KRB5_CRYPTO_TYPE_HEADER:
-	*length = CONFOUNDERLENGTH;
+	*length = CONFOUNDERLENGTH + hash->hashsize;
 	break;
     case KRB5_CRYPTO_TYPE_PADDING:
 	*length = 0;
 	break;
     case KRB5_CRYPTO_TYPE_TRAILER:
+	*length = 0;
+	break;
     case KRB5_CRYPTO_TYPE_CHECKSUM:
 	*length = hash->hashsize;
 	break;