From: Ben Laurie <[EMAIL PROTECTED]>

ben> I find it hard to believe that the Kerberos data structures are as
ben> broken as the OpenSSL ones were.
ben> 
ben> Are you saying that you use the same data structure for calls to
ben> Kerberos DES as to OpenSSL DES? Initialised by the same routines? Or
ben> what?

IIRC, libdes, which is what SSLeay has in crypto/des, and thusly
OpenSSL as well (or at least originally :-)), was written to be
compatible with MIT KRB's DES library, so EAY would be able to write
eBones-Kerberos, which in turn is the basis for KTH-krb4.  MIT KRB5
and Heimdal (the krb5 implementation made at KTH in Sweden) both still
use libdes, as far as I know, so they do come with some compatibility
problems.

It's worth noting that libdes has evolved a little here and there.
With Heimdal, there are some new functions that are not present in
OpenSSL.

All this makes for some very interestring hacks to be able to use
OpenSSL where libdes in various forms were previously used...

-- 
Richard Levitte   \ Spannv�gen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
                    \      SWEDEN       \ or +46-733-72 88 11
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, GemPlus:             http://www.gemplus.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to