From: Ken Raeburn <raeburn@mit.edu>
Date: Fri, 18 Apr 2003 03:27:55 +0000 (+0000)
Subject: * init_ctx.c (DEFAULT_ETYPE_LIST): Add AES with 256 bits at the front of the
X-Git-Tag: krb5-1.4-beta1~1012
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=16a1ba7dd29081b33ffdfa3aae002e67c4053642;p=krb5.git

* init_ctx.c (DEFAULT_ETYPE_LIST): Add AES with 256 bits at the front of the
list.  No 128-bit support by defaut.

ticket: 1418
status: open

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15358 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog
index e70c3b6f6..1467af55f 100644
--- a/src/lib/krb5/krb/ChangeLog
+++ b/src/lib/krb5/krb/ChangeLog
@@ -1,3 +1,8 @@
+2003-04-13  Ken Raeburn  <raeburn@mit.edu>
+
+	* init_ctx.c (DEFAULT_ETYPE_LIST): Add AES with 256 bits at the
+	front of the list.  No 128-bit support by defaut.
+
 2003-04-01  Nalin Dahyabhai  <nalin@redhat.com>
 
 	* gc_frm_kdc.c (krb5_get_cred_from_kdc_opt): Check principal name
diff --git a/src/lib/krb5/krb/init_ctx.c b/src/lib/krb5/krb/init_ctx.c
index 59b6123e6..2f991de16 100644
--- a/src/lib/krb5/krb/init_ctx.c
+++ b/src/lib/krb5/krb/init_ctx.c
@@ -66,6 +66,7 @@
    des-crc for now.  */
 #define DEFAULT_ETYPE_LIST	\
 	"des3-cbc-sha1 arcfour-hmac-md5 " \
+	"aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 " \
 	"des-cbc-crc des-cbc-md5 des-cbc-md4 "
 
 #if (defined(_WIN32))