samba.git/lib/crypto, branch talloc-2.4.0

lib:crypto: Change error return to SMB_ASSERT()

2022-10-05T04:23:32+00:00

Getting an HMAC too long to fit our array is a programming error. It
should always be 64 bytes exactly.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett

CVE-2021-20251 lib:crypto: Add Python functions for AES SAMR password change

2022-09-12T23:07:37+00:00

These functions allow us to perform key derivation and AES256 encryption
in Python. They will be used in a following commit.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

CVE-2021-20251 lib:crypto: Add md4_hash_blob() for hashing data with MD4

2022-09-12T23:07:37+00:00

This lets us access MD4, which might not be available in hashlib, from
Python. This function is used in a following commit for hashing a
password to obtain the verifier for a SAMR password change.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

CVE-2021-20251 lib:crypto: Add des_crypt_blob_16() for encrypting data with DES

2022-09-12T23:07:37+00:00

This lets us access single-DES from Python. This function is used in a
following commit for encrypting an NT hash to obtain the verifier for a
SAMR password change.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

lib:crypto: Use constant time memory comparison to check HMAC

2022-09-12T23:07:37+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

lib:crypto: Check for overflow before filling pauth_tag array

2022-09-12T23:07:37+00:00

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

lib:crypto: Zero auth_tag array in encryption test

2022-09-12T23:07:37+00:00

If samba_gnutls_aead_aes_256_cbc_hmac_sha512_encrypt() does not fill the
array completely, we may be comparing uninitialised bytes.

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

lib:crypto: Add test for pbkdf2

2022-07-28T11:51:29+00:00

This is just that we use the right parameters for gnutls_pbkdf2() and
reach the values from Windows.

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

lib:crypto: Add test for samba_gnutls_aead_aes_256_cbc_hmac_sha512_decrypt()

2022-07-28T11:51:28+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

lib:crypto: Add samba_gnutls_aead_aes_256_cbc_hmac_sha512_decrypt()

2022-07-28T11:51:28+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher