[freenet-cvs] r23111 - trunk/freenet/src/freenet/crypt

[t...@freenetproject.org]

Author: toad
Date: 2008-10-27 20:26:54 +0000 (Mon, 27 Oct 2008)
New Revision: 23111

Modified:
   trunk/freenet/src/freenet/crypt/HMAC.java
Log:
Revert 23072 (see bug #2660). I don't have time to review this properly right 
now, it's a potential security breach as it's crypto code, and I need to 
release 1166.
Please reinstate after 1166 is out.


Modified: trunk/freenet/src/freenet/crypt/HMAC.java
===================================================================
--- trunk/freenet/src/freenet/crypt/HMAC.java   2008-10-27 20:18:02 UTC (rev 
23110)
+++ trunk/freenet/src/freenet/crypt/HMAC.java   2008-10-27 20:26:54 UTC (rev 
23111)
@@ -45,7 +45,7 @@
                else {
                        // Step 2
                        if(K.length > B)
-                               K0 = K = Util.hashBytes(d, K);
+                               K = Util.hashBytes(d, K);

                        if(K.length < B) { // Step 3
                                K0 = new byte[B];