[Bug libc/13236] New: des_setparity() clears high bits

[Bug libc/13236] New: des_setparity() clears high bits

[pierce.lopez at gmail dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=13236

             Bug #: 13236
           Summary: des_setparity() clears high bits
           Product: glibc
           Version: 2.14
            Status: NEW
          Severity: minor
          Priority: P2
         Component: libc
        AssignedTo: drepper.fsp@gmail.com
        ReportedBy: pierce.lopez@gmail.com
    Classification: Unclassified


I actually encountered this in 2.13 on my debian-testing workstation, but
looked in the code in git branch releases/2.14/master and it is clearly there
and appears intentional (sunrpc/des_soft.c)

I guess this is somewhat of a question rather than a pure bug report - why do
we want to only handle ascii keys in des_setparity()? And why do we not have
this aspect mentioned in the man pages, either from the linux man pages project
or from gnu? A quote from the latter:

https://www.gnu.org/software/libc/manual/html_node/DES-Encryption.html
The function des_setparity changes the 64-bit key, stored packed in 8-bit
bytes, to have odd parity by altering the low bits of each byte.

But if you look at the code, in addition to altering the low bit of each byte,
it clears the high bit of each byte.

For now I'm just using the openssl DES_set_odd_parity() which does what I
expect (along with openssl des encryption instead of ecb_encrypt()) and with
which I can successfully create NT responses in MS-CHAP authentications.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug libc/13236] des_setparity() clears high bits

[drepper.fsp at gmail dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=13236

Ulrich Drepper <drepper.fsp at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX

--- Comment #1 from Ulrich Drepper <drepper.fsp at gmail dot com> 2011-10-07 18:33:35 UTC ---
No new code can use that function since SunRPC in glibc is obsoleted.  Old code
will not be changed.  If you want to use RPC code use libtirpc.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug libc/13236] des_setparity() clears high bits

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=13236

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Flags|                            |security-

-- 
You are receiving this mail because:
You are on the CC list for the bug.