Home | History | Annotate | Download | only in cgdconfig
History log of /src/sbin/cgdconfig/pkcs5_pbkdf2.h
RevisionDateAuthorComments
 1.5  28-Apr-2008  martin Remove clause 3 and 4 from TNF licenses
 1.4  06-Nov-2007  christos branches: 1.4.8; 1.4.10;
3 month roland feedback timeout:
- Pass lint
- knf
- convert ints to size_t's
 1.3  17-Mar-2004  dan branches: 1.3.22;
Fix a longstanding algorithmic flaw in PKCS#5 key generation.

The existing pkcs5_pbdkf2 keygen method is retained functionally
as-is, for compatibility with existing params files. The corrected
algorithm, which is now the default for new params file generation, is
called pkcs5_pbkdf2/sha1.

NB. The backwards compatibility for the miscreant keygen method will
be removed at the same time as support for the previous parameters
file syntax. Sometime between now and then, users should update their
params files using -G, which will create a new params file including
an xor value so that the resulting generated key is the same; they
should also

Problem discovery and 2-char algorithm fix by Charles Blundell, messy
compat goop by me, long complicated names by Roland Dowdeswell.

Update manpage accordingly and bump date.
 1.2  24-Mar-2003  elric substantial rototill of the code.

o added new features:
o -G: generate a new paramsfile that produces the same
key as the old paramsfile,
o ffs verify_method,
o multiple keygen methods that are xor'ed together
(for n-factor authentication), and
o calibrating the iteration count of PKCS#5 PBKDF2 to
the current machine's speed.
o changed paramsfile format to allow for the new features.
o replaced open-coded parser with yacc grammar.
o lots of supporting changes.
o updated documentation to reflect new features and new
paramsfile format.
 1.1  04-Oct-2002  elric Initial checkin of cgdconfig(8), a program to configure a cgd.
 1.3.22.1  06-Nov-2007  matt sync with HEAD
 1.4.10.1  18-May-2008  yamt sync with head.
 1.4.8.1  02-Jun-2008  mjf Sync with HEAD.

RSS XML Feed