Page MenuHomeFreeBSD

Switch ppp(8) to use the "modern" DES_ functions
Needs ReviewPublic

Authored by sevan on Jan 8 2017, 11:26 PM.
Referenced Files
Unknown Object (File)
Sun, Apr 14, 12:55 AM
Unknown Object (File)
Mar 15 2024, 1:37 PM
Unknown Object (File)
Mar 15 2024, 1:09 PM
Unknown Object (File)
Jan 2 2024, 12:16 PM
Unknown Object (File)
Dec 22 2023, 9:38 PM
Unknown Object (File)
Nov 18 2023, 11:24 PM
Unknown Object (File)
Nov 18 2023, 7:46 PM
Unknown Object (File)
Nov 18 2023, 7:22 PM
Subscribers

Details

Reviewers
bcr
Group Reviewers
Src Committers
Summary

The original des_ prefixed functions were renamed to use a DES_prefix in OpenSSL 0.9.7. Attached patch switches over to the new format.
This allows ppp to be built against LibreSSL.
DES_set_key() & DES_ecb_encrypt() need to be passed the address of the key_schedule pointer.
Bug 205004

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Skipped
Unit
Tests Skipped

Event Timeline

sevan retitled this revision from to Switch ppp(8) to use the "modern" DES_ functions.
sevan updated this object.
sevan edited the test plan for this revision. (Show Details)
sevan added reviewers: bcr, Src Committers.
sevan set the repository for this revision to rS FreeBSD src repository - subversion.
sevan added a project: Src Committers.

Apart from the one minor issue I do not see problems (which does not mean there aren't any).

It looks like testing requires some setup with different software, since ppp(8) only implements the client side for some of the MSCHAP protocols. This should not need modems though, since ppp(8) seems to support the protocols for VPNs.

usr.sbin/ppp/chap_ms.c
116

The man page suggests using DES_set_key_checked() or DES_set_key_unchecked() since DES_set_key() behaves as one of those depending on a global variable. It seems best to use DES_set_key_unchecked() since these keys are definitely not random and weak keys cannot be avoided other than by picking a different password.

I have a cardbus 3G modem which I can try it with. If only I could find it. :)