projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: eba6cd4) | patch
Avoid really, really huge cpu time usage caused by iteration count in
authorKen Raeburn <raeburn@mit.edu>
Sun, 13 Apr 2003 11:18:42 +0000 (11:18 +0000)
committerKen Raeburn <raeburn@mit.edu>
Sun, 13 Apr 2003 11:18:42 +0000 (11:18 +0000)
commite01da4059775fdc4778b32a820a94904a6483f7c
tree2641ae89549cabb0b0372389ca04225831314836tree | snapshot
parenteba6cd413c1d8061cf4f7152b9701c1376a1df87commit | diff
Avoid really, really huge cpu time usage caused by iteration count in
spoofed preauth data.  (Merely huge cpu time usage is probably still
possible.)

* aes_s2k.c (krb5int_aes_string_to_key): Return an error if the supplied
iteration count is really, really large.

ticket: 1418
status: open

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15349 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/crypto/aes/ChangeLog diff | blob | history
src/lib/crypto/aes/aes_s2k.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.