Add comments to make it slightly clearer how

krb5int_confounder_checksum works.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23463 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/crypto/krb/checksum/confounder.c b/src/lib/crypto/krb/checksum/confounder.c
index 73d69e32a61ef85cb684863f0f89b366aa210704..e8c6bd9c4f82e89d37641410b575887c06097a82 100644 (file)
--- a/src/lib/crypto/krb/checksum/confounder.c
+++ b/src/lib/crypto/krb/checksum/confounder.c
@@ -69,6 +69,7 @@ krb5int_confounder_checksum(const struct krb5_cksumtypes *ctp,
     krb5_crypto_iov *hash_iov, iov;
     size_t blocksize = ctp->enc->block_size, hashsize = ctp->hash->hashsize;
 
+    /* Partition the output buffer into confounder and hash. */
     conf = make_data(output->data, blocksize);
     hashval = make_data(output->data + blocksize, hashsize);
 
@@ -92,7 +93,7 @@ krb5int_confounder_checksum(const struct krb5_cksumtypes *ctp,
     if (ret != 0)
        goto cleanup;
 
-    /* Encrypt the confounder and hash value. */
+    /* Confounder and hash are in output buffer; encrypt them in place. */
     iov.flags = KRB5_CRYPTO_TYPE_DATA;
     iov.data = *output;
     ret = ctp->enc->encrypt(xorkey, NULL, &iov, 1);