[PATCH -v4 1/4 cifs] NTLMv2/NTLMSSP Change variable name mac_key to session key to reflect the key it holds

2010-09-15 Thread shirishpargaonkar
From: Shirish Pargaonkar shirishpargaon...@gmail.com Change name of variable mac_key to session key. The reason mac_key was changed to session key is, this structure does not hold message authentication code, it holds the session key (for ntlmv2, ntlmv1 etc.). mac is generated as a signature in

[PATCH -v4 2/4 cifs] NTLMv2/NTLMSSP ntlmv2 within ntlmssp autentication code

2010-09-15 Thread shirishpargaonkar
From: Shirish Pargaonkar shirishpargaon...@gmail.com Attribue Value (AV) pairs or Target Info (TI) pairs are part of ntlmv2 authentication. Structure ntlmv2_resp had only definition for two av pairs. So removed it, and now allocation of av pairs is dynamic. For servers like Windows 7/2008, av

[PATCH -v4 3/4 cifs] NTLMv2/NTLMSSP define crypto hash functions and create and send keys needed for key exchange

2010-09-15 Thread shirishpargaonkar
From: Shirish Pargaonkar shirishpargaon...@gmail.com Mark dependency on crypto modules in Kconfig. Defining per structures sdesc and cifs_secmech which are used to store crypto hash functions and contexts. They are stored per smb connection and used for all auth mechs to genereate hash values

[PATCH -v4 0/4] NTLMv2/NTLMSSP - enable and sign using crypto apis

2010-09-15 Thread shirishpargaonkar
Three major functionality changes Make NTLMv2 as a default authentication mechanism within NTLMSSP Enable cifs/smb signing Use Crypto sync hash APIs instead of cifs crypto functions to genereate various hashes such as arc4/rc4, md5, and hmac-md5 used during authentication and smb/cifs

Re: [PATCH -v3 3/4 cifs] NTLMv2/NTLMSSP define crypto hash functions and create and send keys needed for key exchange

2010-09-15 Thread Jeff Layton
On Tue, 14 Sep 2010 22:38:14 -0500 Shirish Pargaonkar shirishpargaon...@gmail.com wrote: +             if (ses-tilen 0) { +                     memcpy(bcc_ptr, ses-tiblob, +                             ses-tilen); +                     bcc_ptr += ses-tilen; +                    

[PATCH -v5 1/4] cifs NTLMv2/NTLMSSP Change variable name mac_key to session key to reflect the key it holds

2010-09-15 Thread shirishpargaonkar
From: Shirish Pargaonkar shirishpargaon...@gmail.com Change name of variable mac_key to session key. The reason mac_key was changed to session key is, this structure does not hold message authentication code, it holds the session key (for ntlmv2, ntlmv1 etc.). mac is generated as a signature in

[PATCH -v5 2/4] cifs NTLMv2/NTLMSSP ntlmv2 within ntlmssp autentication code

2010-09-15 Thread shirishpargaonkar
From: Shirish Pargaonkar shirishpargaon...@gmail.com Attribue Value (AV) pairs or Target Info (TI) pairs are part of ntlmv2 authentication. Structure ntlmv2_resp had only definition for two av pairs. So removed it, and now allocation of av pairs is dynamic. For servers like Windows 7/2008, av

[PATCH -v5 3/4] cifs NTLMv2/NTLMSSP define crypto hash functions and create and send keys needed for key exchange

2010-09-15 Thread shirishpargaonkar
From: Shirish Pargaonkar shirishpargaon...@gmail.com Mark dependency on crypto modules in Kconfig. Defining per structures sdesc and cifs_secmech which are used to store crypto hash functions and contexts. They are stored per smb connection and used for all auth mechs to genereate hash values

[PATCH -v5 4/4] cifs NTLMv2/NTLMSSP use kernel crypto apis to calculate hashes and signatures

2010-09-15 Thread shirishpargaonkar
From: Shirish Pargaonkar shirishpargaon...@gmail.com Use kernel crypto sync hash apis insetead of cifs crypto functions. The calls typically corrospond one to one except that insead of key init, setkey is used. Use crypto apis to generate smb signagtures also. Use hmac-md5 to genereate ntlmv2

[PATCH -v5 0/4] cifs NTLMv2/NTLMSSP - enable and sign using crypto apis

2010-09-15 Thread shirishpargaonkar
Three major functionality changes -- Make NTLMv2 as a default authentication mechanism within NTLMSSP Enable cifs/smb signing Use Crypto sync hash APIs instead of cifs crypto functions to genereate various hashes such as arc4/rc4, md5, and hmac-md5 used during authentication and smb/cifs

Re: [PATCH -v5 2/4] cifs NTLMv2/NTLMSSP ntlmv2 within ntlmssp autentication code

2010-09-15 Thread Jeff Layton
On Wed, 15 Sep 2010 17:37:04 -0500 shirishpargaon...@gmail.com wrote: From: Shirish Pargaonkar shirishpargaon...@gmail.com Attribue Value (AV) pairs or Target Info (TI) pairs are part of ntlmv2 authentication. Structure ntlmv2_resp had only definition for two av pairs. So removed it, and

Re: [PATCH -v5 2/4] cifs NTLMv2/NTLMSSP ntlmv2 within ntlmssp autentication code

2010-09-15 Thread Jeff Layton
On Wed, 15 Sep 2010 17:37:04 -0500 shirishpargaon...@gmail.com wrote: From: Shirish Pargaonkar shirishpargaon...@gmail.com Attribue Value (AV) pairs or Target Info (TI) pairs are part of ntlmv2 authentication. Structure ntlmv2_resp had only definition for two av pairs. So removed it, and

Re: [PATCH -v5 2/4] cifs NTLMv2/NTLMSSP ntlmv2 within ntlmssp autentication code

2010-09-15 Thread Shirish Pargaonkar
On Wed, Sep 15, 2010 at 6:09 PM, Jeff Layton jlay...@samba.org wrote: On Wed, 15 Sep 2010 17:37:04 -0500 shirishpargaon...@gmail.com wrote: From: Shirish Pargaonkar shirishpargaon...@gmail.com Attribue Value (AV) pairs or Target Info (TI) pairs are part of ntlmv2 authentication. Structure