sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-05 09:18:06 +03:00
Code
v4-20-stable
samba-mirror/lib/crypto/wscript

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

68 lines
2.4 KiB
Plaintext
Raw Permalink Normal View History

lib: crypto: Add the ability to select Intel AESNI instruction set at configure time. Add --accel-aes=[none|intelaesni] to select. Default is none. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13008 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2017-09-06 21:59:44 +03:00
#!/usr/bin/env python
lib:crypto: Merge wscript_configure into wscript Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-08-02 17:28:53 +03:00
lib: crypto: Add the ability to select Intel AESNI instruction set at configure time. Add --accel-aes=[none|intelaesni] to select. Default is none. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13008 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2017-09-06 21:59:44 +03:00
lib:crypto: Merge wscript_build into wscript Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-08-02 17:34:05 +03:00
def build(bld):
lib/crypto: add legacy_gnutls_server_end_point_cb() if needed gnutls_session_channel_binding(GNUTLS_CB_TLS_SERVER_END_POINT) is only available with gnutls 3.7.2, but we still want to support older gnutls versions and that's easily doable... BUG: https://bugzilla.samba.org/show_bug.cgi?id=15621 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 2f2af3aa8a0366e6502751415a08413bf28ba0cb)
2024-03-05 11:55:47 +03:00
legacy_gnutls_helpers = ''
if not bld.CONFIG_SET('HAVE_GNUTLS_CB_TLS_SERVER_END_POINT'):
legacy_gnutls_helpers += ' gnutls_server_end_point_cb.c'
lib:crypto: Merge wscript_build into wscript Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-08-02 17:34:05 +03:00
bld.SAMBA_SUBSYSTEM("GNUTLS_HELPERS",
source='''
gnutls_error.c
lib:crypto: Implement samba_gnutls_aead_aes_256_cbc_hmac_sha512_encrypt() This is for [MS-SAMR] 3.2.2.4 AES Cipher Usage Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-08-02 17:21:19 +03:00
gnutls_aead_aes_256_cbc_hmac_sha512.c
lib:crypto: Merge wscript_build into wscript Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-08-02 17:34:05 +03:00
gnutls_arcfour_confounded_md5.c
gnutls_weak_crypto.c
lib:crypto: Add samba_gnutls_sp800_108_derive_key() Rename smb2_key_derivation() to samba_gnutls_sp800_108_derive_key() and move it to GNUTLS_HELPERS. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-11-29 01:36:57 +03:00
gnutls_sp800_108.c
lib/crypto: add legacy_gnutls_server_end_point_cb() if needed gnutls_session_channel_binding(GNUTLS_CB_TLS_SERVER_END_POINT) is only available with gnutls 3.7.2, but we still want to support older gnutls versions and that's easily doable... BUG: https://bugzilla.samba.org/show_bug.cgi?id=15621 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 2f2af3aa8a0366e6502751415a08413bf28ba0cb)
2024-03-05 11:55:47 +03:00
''' + legacy_gnutls_helpers,
lib:crypto: Merge wscript_build into wscript Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-08-02 17:34:05 +03:00
deps="gnutls samba-errors")
bld.SAMBA_SUBSYSTEM('LIBCRYPTO',
source='''
md4.c
''',
deps='''
talloc
Remove redundant check and fallback for AES CMAC 128 as we now require GnuTLS 3.6.13 This allows us to remove a lot of conditionally compiled code and so know with more certainly that our tests are covering our code-paths. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2022-10-27 01:09:19 +03:00
''')
lib:crypto: Merge wscript_build into wscript Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-08-02 17:34:05 +03:00
bld.SAMBA_SUBSYSTEM('TORTURE_LIBCRYPTO',
source='md4test.c',
autoproto='test_proto.h',
deps='''
LIBCRYPTO
''')
lib:crypto: Add GKDI module with some constants Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-11-13 07:08:58 +03:00
bld.SAMBA_SUBSYSTEM('gkdi',
lib:crypto: Add implementation of GKDI key derivation Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-11-13 07:08:58 +03:00
source='gkdi.c',
deps='''
talloc
GNUTLS_HELPERS
NDR_GKDI
''')
lib:crypto: Add GKDI module with some constants Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-11-13 07:08:58 +03:00
lib:crypto: Merge wscript_build into wscript Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-08-02 17:34:05 +03:00
bld.SAMBA_PYTHON('python_crypto',
source='py_crypto.c',
CVE-2021-20251 lib:crypto: Add des_crypt_blob_16() for encrypting data with DES This lets us access single-DES from Python. This function is used in a following commit for encrypting an NT hash to obtain the verifier for a SAMR password change. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14611 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2022-07-06 06:36:26 +03:00
deps='gnutls talloc LIBCLI_AUTH',
lib:crypto: Merge wscript_build into wscript Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-08-02 17:34:05 +03:00
realname='samba/crypto.so')
lib:crypto: Add test for samba_gnutls_aead_aes_256_cbc_hmac_sha512_encrypt() Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
2021-08-03 15:14:07 +03:00
bld.SAMBA_BINARY('test_gnutls_aead_aes_256_cbc_hmac_sha512',
source='''
gnutls_error.c
tests/test_gnutls_aead_aes_256_cbc_hmac_sha512.c
''',
deps='cmocka gnutls samba-util samba-errors',
local_include=False,
for_selftest=True)
lib:crypto: Add tests for samba_gnutls_sp800_108_derive_key() Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-11-30 01:00:57 +03:00
bld.SAMBA_BINARY('test_gnutls_sp800_108',
source='''
tests/test_gnutls_sp800_108.c
''',
deps='cmocka GNUTLS_HELPERS samba-util',
local_include=False,
for_selftest=True)
lib:crypto: Add tests for GKDI key derivation Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Dec 22 06:31:29 UTC 2023 on atb-devel-224
2023-12-22 01:04:51 +03:00
bld.SAMBA_BINARY('test_gkdi_key_derivation',
source='test_gkdi_key_derivation.c',
deps='cmocka gkdi talloc NDR_GKDI samba-util samba-security',
for_selftest=True)
Copy Permalink