SIGN_DATA does not protect token header

heimdal · Dec 17, 2015 · 0079a4f · 0079a4f
1 parent d46d082
commit 0079a4f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/gssapi/krb5/cfx.c b/lib/gssapi/krb5/cfx.c
@@ -474,7 +474,7 @@ _gssapi_wrap_cfx_iov(OM_uint32 *minor_status,
 
 	  {"header" | ec-padding | E"header" | krb5-trailer | krb5-header | plaintext-data  }
 
-	  For AEAD modes, E"header" is omitted as it is protected by the IV/SIGN_ONLY data.
+	  For AEAD modes, E"header" is omitted as it is protected by the IV.
 	 */
 
 	i = 0;