iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net/sunrpc/auth_gss
History
Chuck Lever a40cf7530d SUNRPC: Add gk5e definitions for RFC 8009 encryption types 
Fill in entries in the supported_gss_krb5_enctypes array for the
encryption types defined in RFC 8009. These new enctypes use the
SHA-256 and SHA-384 message digest algorithms (as defined in
FIPS-180) instead of the deprecated SHA-1 algorithm, and are thus
more secure.

Note that NIST has scheduled SHA-1 for deprecation:

https://www.nist.gov/news-events/news/2022/12/nist-retires-sha-1-cryptographic-algorithm

Thus these new encryption types are placed under a separate CONFIG
option to enable distributors to separately introduce support for
the AES-SHA2 enctypes and deprecate support for the current set of
AES-SHA1 encryption types as their user space allows.

As this implementation is still a "beta", the default is to not
build it automatically.

Tested-by: Scott Mayhew <smayhew@redhat.com>
Reviewed-by: Simo Sorce <simo@redhat.com>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
2023-02-20 09:20:43 -05:00
..
auth_gss_internal.h
SUNRPC/auth_gss: Convert GFP_NOFS to GFP_KERNEL
2022-02-25 18:50:12 -05:00
auth_gss.c
SUNRPC: ensure the matching upcall is in-flight upon downcall
2022-12-15 18:13:53 -05:00
gss_generic_token.c
sunrpc: Remove unneeded null check
2022-01-06 14:00:20 -05:00
gss_krb5_crypto.c
SUNRPC: Refactor CBC with CTS into helpers
2023-02-20 09:20:42 -05:00
gss_krb5_internal.h
SUNRPC: Hoist KDF into struct gss_krb5_enctype
2023-02-20 09:20:42 -05:00
gss_krb5_keys.c
SUNRPC: Hoist KDF into struct gss_krb5_enctype
2023-02-20 09:20:42 -05:00
gss_krb5_mech.c
SUNRPC: Add gk5e definitions for RFC 8009 encryption types
2023-02-20 09:20:43 -05:00
gss_krb5_seal.c
SUNRPC: Enable rpcsec_gss_krb5.ko to be built without CRYPTO_DES
2023-02-20 09:20:41 -05:00
gss_krb5_seqnum.c
SUNRPC: Remove ->encrypt and ->decrypt methods from struct gss_krb5_enctype
2023-02-20 09:20:41 -05:00
gss_krb5_unseal.c
SUNRPC: Enable rpcsec_gss_krb5.ko to be built without CRYPTO_DES
2023-02-20 09:20:41 -05:00
gss_krb5_wrap.c
SUNRPC: Rename .encrypt_v2 and .decrypt_v2 methods
2023-02-20 09:20:42 -05:00
gss_mech_switch.c
sunrpc: clean up properly in gss_mech_unregister()
2020-05-28 18:15:00 -04:00
gss_rpc_upcall.c
SUNRPC: Ensure that the gssproxy client can start in a connected state
2022-05-07 14:31:15 -04:00
gss_rpc_upcall.h
SUNRPC: Add SPDX IDs to some net/sunrpc/auth_gss/ files
2019-02-14 09:54:37 -05:00
gss_rpc_xdr.c
SUNRPC: Remove XDRBUF_SPARSE_PAGES flag in gss_proxy upcall
2020-12-09 09:38:34 -05:00
gss_rpc_xdr.h
SUNRPC: Add SPDX IDs to some net/sunrpc/auth_gss/ files
2019-02-14 09:54:37 -05:00
Makefile
SUNRPC: Introduce trace points in rpc_auth_gss.ko
2019-02-14 09:20:40 -05:00
svcauth_gss.c
SUNRPC: Add /proc/net/rpc/gss_krb5_enctypes file
2023-02-20 09:20:37 -05:00
trace.c
SUNRPC: remove duplicate include
2020-08-19 13:19:42 -04:00