mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2026-08-09 06:14:34 +02:00
Chuck LeverandChuck Lever
2804a16b9e
The migration to crypto/krb5 eliminated the per-enctype function dispatch and direct crypto API usage, leaving behind a number of orphaned definitions. Remove the following from gss_krb5.h: - GSS_KRB5_K5CLENGTH, used only by removed key derivation - KG_TOK_MIC_MSG and KG_TOK_WRAP_MSG (Kerberos v1 token types; v1 support was dropped earlier) - KG2_TOK_INITIAL and KG2_TOK_RESPONSE (context establishment token types; no remaining users) - KG2_RESP_FLAG_ERROR and KG2_RESP_FLAG_DELEG_OK - enum sgn_alg and enum seal_alg (v1 algorithm constants) - All CKSUMTYPE_* definitions, now duplicated by KRB5_CKSUMTYPE_* in <crypto/krb5.h> - The KG_ error constants from gssapi_err_krb5.h, which have no remaining users - The ENCTYPE_* constant block, replaced by KRB5_ENCTYPE_* from <crypto/krb5.h> - KG_USAGE_SEAL/SIGN/SEQ (3DES usage constants) - KEY_USAGE_SEED_CHECKSUM/ENCRYPTION/INTEGRITY, duplicated by <crypto/krb5.h> - #include <crypto/skcipher.h>, no longer needed Remove the cksum[] field from struct krb5_ctx in gss_krb5_internal.h; no code reads or writes it after the key derivation removal. Switch gss_krb5_enctypes[] in gss_krb5_mech.c to the canonical KRB5_ENCTYPE_* names from <crypto/krb5.h>. Remove stale #include directives: - <crypto/skcipher.h> from gss_krb5_wrap.c - <linux/random.h> and <linux/crypto.h> from gss_krb5_seal.c Assisted-by: Claude:claude-opus-4-6 Reviewed-by: Jeff Layton <jlayton@kernel.org> Acked-by: Anna Schumaker <anna.schumaker@hammerspace.com> Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
69 lines
2.4 KiB
C
69 lines
2.4 KiB
C
/*
|
|
* Adapted from MIT Kerberos 5-1.2.1 lib/include/krb5.h,
|
|
* lib/gssapi/krb5/gssapiP_krb5.h, and others
|
|
*
|
|
* Copyright (c) 2000-2008 The Regents of the University of Michigan.
|
|
* All rights reserved.
|
|
*
|
|
* Andy Adamson <andros@umich.edu>
|
|
* Bruce Fields <bfields@umich.edu>
|
|
*/
|
|
|
|
/*
|
|
* Copyright 1995 by the Massachusetts Institute of Technology.
|
|
* All Rights Reserved.
|
|
*
|
|
* Export of this software from the United States of America may
|
|
* require a specific license from the United States Government.
|
|
* It is the responsibility of any person or organization contemplating
|
|
* export to obtain such a license before exporting.
|
|
*
|
|
* WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
|
|
* distribute this software and its documentation for any purpose and
|
|
* without fee is hereby granted, provided that the above copyright
|
|
* notice appear in all copies and that both that copyright notice and
|
|
* this permission notice appear in supporting documentation, and that
|
|
* the name of M.I.T. not be used in advertising or publicity pertaining
|
|
* to distribution of the software without specific, written prior
|
|
* permission. Furthermore if you modify this software you must label
|
|
* your software as modified software and not distribute it in such a
|
|
* fashion that it might be confused with the original M.I.T. software.
|
|
* M.I.T. makes no representations about the suitability of
|
|
* this software for any purpose. It is provided "as is" without express
|
|
* or implied warranty.
|
|
*
|
|
*/
|
|
|
|
#ifndef _LINUX_SUNRPC_GSS_KRB5_H
|
|
#define _LINUX_SUNRPC_GSS_KRB5_H
|
|
|
|
#include <linux/sunrpc/auth_gss.h>
|
|
#include <linux/sunrpc/gss_err.h>
|
|
|
|
/* Maximum key length (in bytes) for the supported crypto algorithms */
|
|
#define GSS_KRB5_MAX_KEYLEN (32)
|
|
|
|
/* Maximum checksum function output for the supported enctypes */
|
|
#define GSS_KRB5_MAX_CKSUM_LEN (24)
|
|
|
|
/* Maximum blocksize for the supported crypto algorithms */
|
|
#define GSS_KRB5_MAX_BLOCKSIZE (16)
|
|
|
|
/* The length of the Kerberos GSS token header */
|
|
#define GSS_KRB5_TOK_HDR_LEN (16)
|
|
|
|
#define KG2_TOK_MIC 0x0404
|
|
#define KG2_TOK_WRAP 0x0504
|
|
|
|
#define KG2_TOKEN_FLAG_SENTBYACCEPTOR 0x01
|
|
#define KG2_TOKEN_FLAG_SEALED 0x02
|
|
#define KG2_TOKEN_FLAG_ACCEPTORSUBKEY 0x04
|
|
|
|
/* from rfc4121 */
|
|
#define KG_USAGE_ACCEPTOR_SEAL (22)
|
|
#define KG_USAGE_ACCEPTOR_SIGN (23)
|
|
#define KG_USAGE_INITIATOR_SEAL (24)
|
|
#define KG_USAGE_INITIATOR_SIGN (25)
|
|
|
|
#endif /* _LINUX_SUNRPC_GSS_KRB5_H */
|