diff options
author | Richard Levitte <levitte@openssl.org> | 2003-02-12 17:20:39 +0000 |
---|---|---|
committer | Richard Levitte <levitte@openssl.org> | 2003-02-12 17:20:39 +0000 |
commit | 9ec1d35f29c5d3c0c6a2461610c7db494a0d9aa9 (patch) | |
tree | 5150329350db2a78357efa97ce4fad4993a4ace1 | |
parent | cf56663fb71ce279eb8ea603faf0a3c98cc7bc47 (diff) | |
download | openssl-9ec1d35f29c5d3c0c6a2461610c7db494a0d9aa9.tar.gz |
Adjust DES_cbc_cksum() so the returned value is the same as MIT's
mit_des_cbc_cksum(). The difference was first observed, then verified by
looking at the MIT source.
-rw-r--r-- | CHANGES | 6 | ||||
-rw-r--r-- | crypto/des/cbc_cksm.c | 9 |
2 files changed, 15 insertions, 0 deletions
@@ -420,6 +420,12 @@ TODO: bug: pad x with leading zeros if necessary Changes between 0.9.7 and 0.9.7a [XX xxx 2003] + *) Adjust DES_cbc_cksum() so it returns the same value as the MIT + Kerberos function mit_des_cbc_cksum(). Before this change, + the value returned by DES_cbc_cksum() was like the one from + mit_des_cbc_cksum(), except the bytes were swapped. + [Kevin Greaney <Kevin.Greaney@hp.com> and Richard Levitte] + *) Allow an application to disable the automatic SSL chain building. Before this a rather primitive chain build was always performed in ssl3_output_cert_chain(): an application had no way to send the diff --git a/crypto/des/cbc_cksm.c b/crypto/des/cbc_cksm.c index 6c5305b99d..09a7ba56aa 100644 --- a/crypto/des/cbc_cksm.c +++ b/crypto/des/cbc_cksm.c @@ -93,5 +93,14 @@ DES_LONG DES_cbc_cksum(const unsigned char *in, DES_cblock *output, l2c(tout1,out); } tout0=tin0=tin1=tin[0]=tin[1]=0; + /* + Transform the data in tout1 so that it will + match the return value that the MIT Kerberos + mit_des_cbc_cksum API returns. + */ + tout1 = ((tout1 >> 24L) & 0x000000FF) + | ((tout1 >> 8L) & 0x0000FF00) + | ((tout1 << 8L) & 0x00FF0000) + | ((tout1 << 24L) & 0xFF000000); return(tout1); } |