SUNRPC: Obscure Kerberos integrity keys

Browse source

There's no need to keep the integrity keys around if we instead
allocate and key a pair of ahashes and keep those. This not only
enables the subkeys to be destroyed immediately after deriving
them, but it makes the Kerberos integrity code path more efficient.

Tested-by: Scott Mayhew <smayhew@redhat.com>
Reviewed-by: Simo Sorce <simo@redhat.com>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>

...

This commit is contained in:

Chuck Lever 2023-01-15 12:21:13 -05:00

parent 2dbe0cac3c

commit 8270dbfceb

3 changed files with 23 additions and 124 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

9

include/linux/sunrpc/gss_krb5.h

View file

116

net/sunrpc/auth_gss/gss_krb5_crypto.c

View file

22

net/sunrpc/auth_gss/gss_krb5_mech.c

View file