17c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 27c478bd9Sstevel@tonic-gate /* 37c478bd9Sstevel@tonic-gate * lib/krb5/krb/encrypt_tk.c 47c478bd9Sstevel@tonic-gate * 57c478bd9Sstevel@tonic-gate * Copyright 1990 by the Massachusetts Institute of Technology. 67c478bd9Sstevel@tonic-gate * All Rights Reserved. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * Export of this software from the United States of America may 97c478bd9Sstevel@tonic-gate * require a specific license from the United States Government. 107c478bd9Sstevel@tonic-gate * It is the responsibility of any person or organization contemplating 117c478bd9Sstevel@tonic-gate * export to obtain such a license before exporting. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and 147c478bd9Sstevel@tonic-gate * distribute this software and its documentation for any purpose and 157c478bd9Sstevel@tonic-gate * without fee is hereby granted, provided that the above copyright 167c478bd9Sstevel@tonic-gate * notice appear in all copies and that both that copyright notice and 177c478bd9Sstevel@tonic-gate * this permission notice appear in supporting documentation, and that 187c478bd9Sstevel@tonic-gate * the name of M.I.T. not be used in advertising or publicity pertaining 197c478bd9Sstevel@tonic-gate * to distribution of the software without specific, written prior 207c478bd9Sstevel@tonic-gate * permission. Furthermore if you modify this software you must label 217c478bd9Sstevel@tonic-gate * your software as modified software and not distribute it in such a 227c478bd9Sstevel@tonic-gate * fashion that it might be confused with the original M.I.T. software. 237c478bd9Sstevel@tonic-gate * M.I.T. makes no representations about the suitability of 247c478bd9Sstevel@tonic-gate * this software for any purpose. It is provided "as is" without express 257c478bd9Sstevel@tonic-gate * or implied warranty. 267c478bd9Sstevel@tonic-gate * 277c478bd9Sstevel@tonic-gate * 287c478bd9Sstevel@tonic-gate * krb5_encrypt_tkt_part() routine. 297c478bd9Sstevel@tonic-gate */ 307c478bd9Sstevel@tonic-gate 317c478bd9Sstevel@tonic-gate #include "k5-int.h" 327c478bd9Sstevel@tonic-gate 337c478bd9Sstevel@tonic-gate /* 347c478bd9Sstevel@tonic-gate Takes unencrypted dec_ticket & dec_tkt_part, encrypts with 357c478bd9Sstevel@tonic-gate dec_ticket->enc_part.etype 367c478bd9Sstevel@tonic-gate using *srv_key, and places result in dec_ticket->enc_part. 377c478bd9Sstevel@tonic-gate The string dec_ticket->enc_part.ciphertext will be allocated before 387c478bd9Sstevel@tonic-gate formatting. 397c478bd9Sstevel@tonic-gate 407c478bd9Sstevel@tonic-gate returns errors from encryption routines, system errors 417c478bd9Sstevel@tonic-gate 427c478bd9Sstevel@tonic-gate enc_part->ciphertext.data allocated & filled in with encrypted stuff 437c478bd9Sstevel@tonic-gate */ 447c478bd9Sstevel@tonic-gate 457c478bd9Sstevel@tonic-gate krb5_error_code 46*505d05c7Sgtb krb5_encrypt_tkt_part(krb5_context context, const krb5_keyblock *srv_key, register krb5_ticket *dec_ticket) 477c478bd9Sstevel@tonic-gate { 487c478bd9Sstevel@tonic-gate krb5_data *scratch; 497c478bd9Sstevel@tonic-gate krb5_error_code retval; 507c478bd9Sstevel@tonic-gate register krb5_enc_tkt_part *dec_tkt_part = dec_ticket->enc_part2; 517c478bd9Sstevel@tonic-gate 527c478bd9Sstevel@tonic-gate /* start by encoding the to-be-encrypted part. */ 537c478bd9Sstevel@tonic-gate if ((retval = encode_krb5_enc_tkt_part(dec_tkt_part, &scratch))) { 547c478bd9Sstevel@tonic-gate return retval; 557c478bd9Sstevel@tonic-gate } 567c478bd9Sstevel@tonic-gate 577c478bd9Sstevel@tonic-gate #define cleanup_scratch() { (void) memset(scratch->data, 0, scratch->length); \ 587c478bd9Sstevel@tonic-gate krb5_free_data(context, scratch); } 597c478bd9Sstevel@tonic-gate 607c478bd9Sstevel@tonic-gate /* call the encryption routine */ 617c478bd9Sstevel@tonic-gate retval = krb5_encrypt_helper(context, srv_key, 627c478bd9Sstevel@tonic-gate KRB5_KEYUSAGE_KDC_REP_TICKET, scratch, 637c478bd9Sstevel@tonic-gate &dec_ticket->enc_part); 647c478bd9Sstevel@tonic-gate 657c478bd9Sstevel@tonic-gate cleanup_scratch(); 667c478bd9Sstevel@tonic-gate 677c478bd9Sstevel@tonic-gate return(retval); 687c478bd9Sstevel@tonic-gate } 69