* init_ctx.c (DEFAULT_ETYPE_LIST): Add AES with 256 bits at the front of the

list.  No 128-bit support by defaut.

ticket: 1418
status: open

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15358 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog
index e70c3b6f6aaa67321e855b60bfba189e04c45c5b..1467af55f41de7acbeec047f6b17204f126082e6 100644 (file)
--- a/src/lib/krb5/krb/ChangeLog
+++ b/src/lib/krb5/krb/ChangeLog
@@ -1,3 +1,8 @@
+2003-04-13  Ken Raeburn  <raeburn@mit.edu>
+
+       * init_ctx.c (DEFAULT_ETYPE_LIST): Add AES with 256 bits at the
+       front of the list.  No 128-bit support by defaut.
+
 2003-04-01  Nalin Dahyabhai  <nalin@redhat.com>
 
        * gc_frm_kdc.c (krb5_get_cred_from_kdc_opt): Check principal name

diff --git a/src/lib/krb5/krb/init_ctx.c b/src/lib/krb5/krb/init_ctx.c
index 59b6123e677ffc371fe40981ff977257dfac43ee..2f991de16b8bad4ec722270039d1e154b71200fd 100644 (file)
--- a/src/lib/krb5/krb/init_ctx.c
+++ b/src/lib/krb5/krb/init_ctx.c
@@ -66,6 +66,7 @@
    des-crc for now.  */
 #define DEFAULT_ETYPE_LIST     \
        "des3-cbc-sha1 arcfour-hmac-md5 " \
+       "aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 " \
        "des-cbc-crc des-cbc-md5 des-cbc-md4 "
 
 #if (defined(_WIN32))