Author: erodriguez
Date: Tue Nov  2 20:16:19 2004
New Revision: 56470

Modified:
   
incubator/directory/kerberos/trunk/source/main/org/apache/kerberos/crypto/CryptoService.java
Log:
Closed access to a method that did not properly pad data prior to encryption.

Modified: 
incubator/directory/kerberos/trunk/source/main/org/apache/kerberos/crypto/CryptoService.java
==============================================================================
--- 
incubator/directory/kerberos/trunk/source/main/org/apache/kerberos/crypto/CryptoService.java
        (original)
+++ 
incubator/directory/kerberos/trunk/source/main/org/apache/kerberos/crypto/CryptoService.java
        Tue Nov  2 20:16:19 2004
@@ -86,12 +86,7 @@
                byte[] plaintext = OctetUtils.long2octet(date.getTime());
                return encryptionEngine.encrypt(plaintext, key.getKeyValue());
        }
-
-       public byte[] encrypt(EncryptionKey key, byte[] plaintext) throws 
KerberosException {
-               EncryptionEngine encryptionEngine = 
getInstance(key.getKeyType());
-               return encryptionEngine.encrypt(plaintext, key.getKeyValue());
-       }
-
+       
        public EncryptionKey getEncryptionKey(String password, String realm, 
String username) {
                DesStringToKey key = new DesStringToKey(password, realm, 
username);
                byte[] keyBytes = key.getKey();
@@ -129,6 +124,11 @@
        
        // TODO - The classes below are key production util code and I can 
picture them moving
        //        to a key production base class when I add DES3 and/or AES 
support.
+       
+       private byte[] encrypt(EncryptionKey key, byte[] plaintext) throws 
KerberosException {
+               EncryptionEngine encryptionEngine = 
getInstance(key.getKeyType());
+               return encryptionEngine.encrypt(plaintext, key.getKeyValue());
+       }
        
        private byte[] padString(byte encodedString[]) {
                int x;

Reply via email to