[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: arcfour-hmac checksum salt value

On Fri, Mar 14, 2008 at 1:03 PM, Love Hörnquist Åstrand <lha@kth.se> wrote:
> >>> While implementing arcfour-hmac for Linux Kernel NFS use, I have run
>  >>> into the following issue:
>  >>>
>
> >>  From where do you get 13 in heimdal ?
>  >>
>  >>  From what I can read, heimdal uses KRB5_KU_USAGE_SIGN that later in
>  >> the crypto layer is mapped to 15 for the mic checksum.
>  >>
>
> > Function usage2arcfour() when given KRB5_KU_USAGE_SEAL.
>  >
>  > _gsskrb5_wrap()
>  >  --> _gssapi_wrap_arcfour()
>  >    --> arcfour_mic_cksum()
>  >      --> krb5_create_checksum()
>  >        --> usage2arcfour()
>  >
>  > I was only looking at your code (and testing my code against Solaris).
>  >
>  > Let me know if I'm misreading this...
>
>  Ah, confused wrap with mic. if you look at older drafts they uses 13
>  for wrap [1]. 15 must be a copy and paste error.
>
>
>  Love
>
>  [1] http://tools.ietf.org/html/draft-brezak-win2k-krb-rc4-hmac-02

Thanks!  It makes more sense now.  I will submit an errata report for rfc4757.

K.C.