picnoir/glibc
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity
glibc/conform/data
History
Zack Weinberg b10a0accee Disallow use of DES encryption functions in new programs. 
The functions encrypt, setkey, encrypt_r, setkey_r, cbc_crypt,
ecb_crypt, and des_setparity should not be used in new programs,
because they use the DES block cipher, which is unacceptably weak by
modern standards.  Demote all of them to compatibility symbols, and
remove their prototypes from installed headers.  cbc_crypt, ecb_crypt,
and des_setparity were already compat symbols when glibc was
configured with --disable-obsolete-rpc.

POSIX requires encrypt and setkey to be available when _XOPEN_CRYPT
is defined, so this change also removes the definition of X_OPEN_CRYPT
from <unistd.h>.

The entire "DES Encryption" section is dropped from the manual, as is
the mention of AUTH_DES and FIPS 140-2 in the introduction to
crypt.texi.  The documentation of 'memfrob' cross-referenced the DES
Encryption section, which is replaced by a hyperlink to libgcrypt, and
while I was in there I spruced up the actual documentation of
'memfrob' and 'strfry' a little.  It's still fairly jokey, because
those functions _are_ jokes, but they do also have real use cases, so
people trying to use them for real should have all the information
they need.

DES-based authentication for Sun RPC is also insecure and should be
deprecated or even removed, but maybe that can be left as TI-RPC's
problem.
2018-06-29 16:53:18 +02:00
..
arpa conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
net conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
netinet hurd: Fix symbols exposition 2018-04-19 20:14:45 +02:00
sys hurd xfails: Add missing bug references 2018-04-20 17:14:13 +02:00
aio.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
assert.h-data conformtest: Update expectations for some ISO C headers. 2012-05-01 20:05:49 +00:00
complex.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
cpio.h-data conformtest: Clean up expectations for POSIX for various headers. 2012-11-19 22:20:44 +00:00
ctype.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
dirent.h-data First steps to get conformtest fully working 2012-02-25 23:18:39 -05:00
dlfcn.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
errno.h-data conformtest: Clean up expectations for POSIX for more headers. 2012-11-19 22:21:47 +00:00
fcntl.h-data hurd: xfail some structure fields ABI incompatibility with standards 2018-04-19 01:52:51 +02:00
fenv.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
float.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
fmtmsg.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
fnmatch.h-data First steps to get conformtest fully working 2012-02-25 23:18:39 -05:00
ftw.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
glob.h-data conformtest: Clean up expectations for POSIX for various headers. 2012-11-19 22:20:44 +00:00
grp.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
iconv.h-data First steps to get conformtest fully working 2012-02-25 23:18:39 -05:00
inttypes.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
iso646.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
langinfo.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
libgen.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
limits.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
locale.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
math.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
monetary.h-data First steps to get conformtest fully working 2012-02-25 23:18:39 -05:00
mqueue.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
ndbm.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
netdb.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
nl_types.h-data First steps to get conformtest fully working 2012-02-25 23:18:39 -05:00
poll.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
pthread.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
pwd.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
regex.h-data conformtest: Clean up expectations for POSIX for various headers. 2012-11-19 22:20:44 +00:00
sched.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
search.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
semaphore.h-data conformtest: Allow time.h inclusion from semaphore.h for XOPEN2K. 2017-04-28 16:52:16 +00:00
setjmp.h-data conformtest: Update expectations for more ISO C headers. 2012-05-09 10:05:14 +00:00
signal.h-data hurd xfails: Add missing bug references 2018-04-20 17:14:13 +02:00
spawn.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
stdalign.h-data conformtest: Clean up / correct / expand C99 and C11 expectations. 2012-11-07 19:36:48 +00:00
stdarg.h-data conformtest: Correct XOPEN2K stdarg.h expectations. 2016-04-26 13:56:04 +00:00
stdbool.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
stddef.h-data conformtest: Update expectations for some ISO C headers. 2012-05-01 20:05:49 +00:00
stdint.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
stdio.h-data Don't install libio.h or _G_config.h. 2018-02-07 10:07:31 -05:00
stdlib.h-data Disallow use of DES encryption functions in new programs. 2018-06-29 16:53:18 +02:00
stdnoreturn.h-data conformtest: Clean up / correct / expand C99 and C11 expectations. 2012-11-07 19:36:48 +00:00
string.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
strings.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
stropts.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
syslog.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
tar.h-data conformtest: clean up POSIX expectations for semaphore.h, signal.h, tar.h. 2014-03-07 03:21:04 +00:00
termios.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
tgmath.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
time.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
uchar.h-data conformtest: Clean up / correct / expand C99 and C11 expectations. 2012-11-07 19:36:48 +00:00
ucontext.h-data conformtest: XFAIL uc_mcontext test for powerpc32 (bug 21635). 2017-06-20 17:51:36 +00:00
ulimit.h-data First steps to get conformtest fully working 2012-02-25 23:18:39 -05:00
unistd.h-data Disallow use of DES encryption functions in new programs. 2018-06-29 16:53:18 +02:00
utime.h-data Fix up POSIX testing in conformtest 2012-02-26 13:17:27 -05:00
utmpx.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
varargs.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
wchar.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
wctype.h-data conformtest: Fix XPG standard naming. 2017-04-27 20:29:35 +00:00
wordexp.h-data conformtest: Clean up expectations for POSIX for various headers. 2012-11-19 22:20:44 +00:00