From bdc768545be057151538bbf76130065ccf58c02c Mon Sep 17 00:00:00 2001 From: ghudson Date: Fri, 28 Oct 2011 15:45:03 +0000 Subject: [PATCH] ticket: 6994 subject: Fix intermediate key length in hmac-md5 checksum target_version: 1.10 tags: pullup When using hmac-md5, the intermediate key length is the output of the hash function (128 bits), not the input key length. Relevant if the input key is not an RC4 key. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25418 dc483132-0cff-0310-8789-dd5450dbe970 --- src/lib/crypto/krb/checksum_hmac_md5.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib/crypto/krb/checksum_hmac_md5.c b/src/lib/crypto/krb/checksum_hmac_md5.c index 6c5f6175de..8145875ba9 100644 --- a/src/lib/crypto/krb/checksum_hmac_md5.c +++ b/src/lib/crypto/krb/checksum_hmac_md5.c @@ -59,7 +59,7 @@ krb5_error_code krb5int_hmacmd5_checksum(const struct krb5_cksumtypes *ctp, ret = krb5int_hmac(ctp->hash, key, &iov, 1, &ds); if (ret) goto cleanup; - ks.length = key->keyblock.length; + ks.length = ds.length; ks.contents = (krb5_octet *) ds.data; keyblock = &ks; } else /* For md5-hmac, just use the key. */