CVS log for src/lib/libcrypt/crypt.c

Up to [cvs.NetBSD.org] / src / lib / libcrypt

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Pull up following revision(s) (requested by riastradh in ticket #794):

	lib/libcrypt/crypt-argon2.c: revision 1.20
	lib/libcrypt/crypt-argon2.c: revision 1.21
	lib/libcrypt/crypt-argon2.c: revision 1.22
	lib/libcrypt/md5crypt.c: revision 1.16
	lib/libcrypt/hmac.c: revision 1.5
	lib/libcrypt/crypt-sha1.c: revision 1.11
	lib/libcrypt/pw_gensalt.c: revision 1.14
	lib/libcrypt/crypt.c: revision 1.41

Don't use uninitialized variable.
Fixes PR 57895.

libcrypt/crypt-argon2.c: Add RCS id.
Noted in PR lib/57895.

libcrypt: Nix trailing whitespace.
No functional change intended.
Prompted by tying up loose ends around PR lib/57895.

libcrypt: Nix trailing whitespace.

No functional change intended.

Prompted by tying up loose ends around PR lib/57895.

libcrypt: trailing white space

Fix typo in comment.

Mostly merge changes from HEAD upto 20200411

Merge changes from current as of 20200406

Avoid undefined behavior in left shift

crypt.c:772:11, left shift of 1363235140 by 1 places cannot be represented
in type 'int32_t' (aka 'int')

Avoid undefined behavior in bit shift operations

crypt.c:839:40, left shift of negative value -1197182952
crypt.c:840:40, left shift of negative value -264997776

adding argon2 support to libcrypt. argon2 user authentication now
available via MKARGON2=yes (3 variants supported; argon2id recommended)
before using, please read argon2 paper at
https://github.com/P-H-C/phc-winner-argon2

adding full scheme comparison to libcrypt:crypt and pwhash tests

fix error messages

sync with head

make __crypt static

wrap crypt() to a function that returns *0 and *1 on error.

perform the check for all salts > 2.

Provide a safer salting method that does not turn invalid salts to '.'.
Be more sensitive to bad salts and counts. From:
http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/glibc/crypt_freesec.c
From Solar Designer

avoid accessing array over its bound, from Solar Designer

Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html

ANSI function prototypes

de-__P

Remove more duplicate #includes, and a few spurious whitespaces at EOL
From Slava Semushin <slava.semushin@gmail.com>

Constify prtab() argument, fixes MKDEBUGLIB build.

gently add some "const", and avoid some casts
compiles with WARNS=4 now (on i386 and alpha)

Need stdio.h if debug.

Add support for SHA1 hashed passwords.
The algorithm used is essentially PBKDF1 from RFC 2898 but using
hmac_sha1 rather than SHA1 directly (suggested by smb@research.att.com).

 * The format of the encrypted password is:
 * $<tag>$<iterations>$<salt>$<digest>
 *
 * where:
 *      <tag>           is "sha1"
 *      <iterations>    is an unsigned int identifying how many rounds
 *                      have been applied to <digest>.  The number
 *                      should vary slightly for each password to make
 *                      it harder to generate a dictionary of
 *                      pre-computed hashes.  See crypt_sha1_iterations.
 *      <salt>          up to 64 bytes of random data, 8 bytes is
 *                      currently considered more than enough.
 *      <digest>        the hashed password.

hmac.c implementes HMAC as defined in RFC 2104 and includes a unit
test for both hmac_sha1 and hmac_sha1 using a selection of the Known
Answer Tests from RFC 2202.

It is worth noting that to be FIPS compliant the hmac key (password)
should be 10-20 chars.

Pullup rev 1.19-1.21 (requested by provos in ticket #1386)

Introduce bcrypt password scheme. Adds the arc4random API for creating
cryptographically strong random numbers.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22280, verified by myself.

make the read-only arrays const

support bcrypt password.  can be chosen by "blowfish" keyword in passwd.conf.
from openbsd

Pull up revisions 1.16-1.17 (requested by jonathan):
  Add support for MD5-hashed passwords.

Four casts for lint.

fix nested extern declaration.

Handle non-DES encrypted passwords; currently only MD5.

Sync w/ netbsd-1-5-base.

Enable decryption in crypt(), from cryptosrc-intl, and lift the updated
manual page (which describes decryption) from cryptosrc-us.

Fix doubled 'the's.

vax -> __vax__

Need <stdlib.h> for setkey() prototype.

don't kill 'register' in comments!

remove obsolete register declarations

Pull rev 1.9 up from trunk (cgd)

specify array sizes in init_perm prototype.  One of the array specifications
was "C_block [][]", which isn't valid (or sensible!) C (only the last
dimension may be omitted).  However, all of the dimensions are known
so they might as well be specified.

don't let prototypes disappear if LARGEDATA is defined

rcsid police, deprecate some use of register

add explicit return types and braces for gcc -Wall, some minor KNF
existing differences between exportable and domestic versions were
  preserved.

use the (broken) crypt.c from the 4.4BSD-Lite Foreign distribution, that
can encrypt passwords but _cannot_ decrypt anything.  "real" (i.e. two-way,
unbroken) crypt() now lives in /usr/src/domestic.

type sanity

cast for quiet.

Add RCS identifiers.

made libcrypt, so exportable vs. non-exportable packages can be
handled easliy.