Permalink
Browse files

ticket: 6994

subject: Fix intermediate key length in hmac-md5 checksum
target_version: 1.10
tags: pullup

When using hmac-md5, the intermediate key length is the output of the
hash function (128 bits), not the input key length.  Relevant if the
input key is not an RC4 key.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25418 dc483132-0cff-0310-8789-dd5450dbe970
  • Loading branch information...
1 parent d8976a5 commit bdc768545be057151538bbf76130065ccf58c02c ghudson committed Oct 28, 2011
Showing with 1 addition and 1 deletion.
  1. +1 −1 src/lib/crypto/krb/checksum_hmac_md5.c
@@ -59,7 +59,7 @@ krb5_error_code krb5int_hmacmd5_checksum(const struct krb5_cksumtypes *ctp,
ret = krb5int_hmac(ctp->hash, key, &iov, 1, &ds);
if (ret)
goto cleanup;
- ks.length = key->keyblock.length;
+ ks.length = ds.length;
ks.contents = (krb5_octet *) ds.data;
keyblock = &ks;
} else /* For md5-hmac, just use the key. */

0 comments on commit bdc7685

Please sign in to comment.