Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use with openssl library build without md4. #37

Closed
adiroiban opened this issue Apr 10, 2022 · 2 comments · Fixed by #38
Closed

Use with openssl library build without md4. #37

adiroiban opened this issue Apr 10, 2022 · 2 comments · Fixed by #38

Comments

@adiroiban
Copy link

As reported here jborean93/smbprotocol#173 (comment) it looks like Ubuntu 22.04 will have openssl without MD4

I guess there are out there other Linux distributions that might already ship without md4, is just that nobody uses them with NTLMv1

I see that md4 is used in pyspnego here

session_base_key = md4(nt_hash)

With a simply "proxy" implementation here

def md4(m: bytes) -> bytes:

I guess that the only option for legacy, is to vendor/copy/reimplement md4 in pysnego

Like this https://github.com/rpicard/py-md4 ... no licence for the code :(

Or document that ntlmv1 is not supported with old NTLMv1

@jborean93
Copy link
Owner

This is going to fun, on 1 hand using md4 should be respected by OS settings but on the other hand md4 is absolutely required for NTLM which while evil is a very common use case of this library. Using a custom implementation is probably the best way forward.

@jborean93
Copy link
Owner

This should be fixed with #38.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants