LIBRARY

Kerberos 5 Library (libkrb5, -lkrb5)

SYNOPSIS

In krb5.h

Ft krb5_error_code Fo krb5_c_block_size Fa krb5_context context Fa krb5_enctype enctype Fa size_t *blocksize Fc Ft krb5_error_code Fo krb5_c_decrypt Fa krb5_context context Fa const krb5_keyblock key Fa krb5_keyusage usage Fa const krb5_data *ivec Fa krb5_enc_data *input Fa krb5_data *output Fc Ft krb5_error_code Fo krb5_c_encrypt Fa krb5_context context Fa const krb5_keyblock *key Fa krb5_keyusage usage Fa const krb5_data *ivec Fa const krb5_data *input Fa krb5_enc_data *output Fc Ft krb5_error_code Fo krb5_c_encrypt_length Fa krb5_context context Fa krb5_enctype enctype Fa size_t inputlen Fa size_t *length Fc Ft krb5_error_code Fo krb5_c_enctype_compare Fa krb5_context context Fa krb5_enctype e1 Fa krb5_enctype e2 Fa krb5_boolean *similar Fc Ft krb5_error_code Fo krb5_c_make_random_key Fa krb5_context context Fa krb5_enctype enctype Fa krb5_keyblock *random_key Fc Ft krb5_error_code Fo krb5_c_make_checksum Fa krb5_context context Fa krb5_cksumtype cksumtype Fa const krb5_keyblock *key Fa krb5_keyusage usage Fa const krb5_data *input Fa krb5_checksum *cksum Fc Ft krb5_error_code Fo krb5_c_verify_checksum Fa krb5_context context Fa const krb5_keyblock *key Fa krb5_keyusage usage Fa const krb5_data *data Fa const krb5_checksum *cksum Fa krb5_boolean *valid Fc Ft krb5_error_code Fo krb5_c_checksum_length Fa krb5_context context Fa krb5_cksumtype cksumtype Fa size_t *length Fc Ft krb5_error_code Fo krb5_c_get_checksum Fa krb5_context context Fa const krb5_checksum *cksum Fa krb5_cksumtype *type Fa krb5_data **data Fc Ft krb5_error_code Fo krb5_c_set_checksum Fa krb5_context context Fa krb5_checksum *cksum Fa krb5_cksumtype type Fa const krb5_data *data Fc Ft krb5_boolean Fo krb5_c_valid_enctype Fa krb5_enctype etype Fc Ft krb5_boolean Fo krb5_c_valid_cksumtype Fa krb5_cksumtype ctype Fc Ft krb5_boolean Fo krb5_c_is_coll_proof_cksum Fa krb5_cksumtype ctype Fc Ft krb5_boolean Fo krb5_c_is_keyed_cksum Fa krb5_cksumtype ctype Fc Ft krb5_error_code Fo krb5_c_keylengths Fa krb5_context context Fa krb5_enctype enctype Fa size_t *inlength Fa size_t *keylength Fc

DESCRIPTION

The functions starting with krb5_c are compat functions with MIT kerberos.

The krb5_enc_data structure holds and encrypted data. There are two public accessible members of krb5_enc_data enctype that holds the encryption type of the data encrypted and ciphertext that is a Ft krb5_data that might contain the encrypted data.

Fn krb5_c_block_size returns the blocksize of the encryption type.

Fn krb5_c_decrypt decrypts Fa input and store the data in Fa output. If Fa ivec is NULL the default initialization vector for that encryption type will be used.

Fn krb5_c_encrypt encrypts the plaintext in Fa input and store the ciphertext in Fa output .

Fn krb5_c_encrypt_length returns the length the encrypted data given the plaintext length.

Fn krb5_c_enctype_compare compares to encryption types and returns if they use compatible encryption key types.

Fn krb5_c_make_checksum creates a checksum Fa cksum with the checksum type Fa cksumtype of the data in Fa data . Fa key and Fa usage are used if the checksum is a keyed checksum type. Returns 0 or an error code.

Fn krb5_c_verify_checksum verifies the checksum of Fa data in Fa cksum that was created with Fa key using the key usage Fa usage . Fa verify is set to non-zero if the checksum verifies correctly and zero if not. Returns 0 or an error code.

Fn krb5_c_checksum_length returns the length of the checksum.

Fn krb5_c_set_checksum sets the krb5_checksum structure given Fa type and Fa data . The content of Fa cksum should be freeed with Fn krb5_c_free_checksum_contents .

Fn krb5_c_get_checksum retrieves the components of the krb5_checksum structure. Fa data should be free with Fn krb5_free_data . If some either of Fa data or Fa checksum is not needed for the application, NULL can be passed in.

Fn krb5_c_valid_enctype returns true if Fa etype is a valid encryption type.

Fn krb5_c_valid_cksumtype returns true if Fa ctype is a valid checksum type.

Fn krb5_c_is_keyed_cksum return true if Fa ctype is a keyed checksum type.

Fn krb5_c_is_coll_proof_cksum returns true if Fa ctype is a collision proof checksum type.

Fn krb5_c_keylengths return the minimum length Fa ( inlength ) bytes needed to create a key and the length Fa ( keylength ) of the resulting key for the Fa enctype .