]> git.baikalelectronics.ru Git - kernel.git/commit
ksmbd: add support for key exchange
authorNamjae Jeon <linkinjeon@kernel.org>
Tue, 1 Feb 2022 09:20:34 +0000 (18:20 +0900)
committerSteve French <stfrench@microsoft.com>
Fri, 4 Feb 2022 06:12:22 +0000 (00:12 -0600)
commit332faab3dccc6ce1c3d34d7b343bacbdc7504136
treec900eeeda7b0d52faa79dccbb495084b472b095a
parent64e20baad47ce9d51f5ef5823843ffaf9bae25c2
ksmbd: add support for key exchange

When mounting cifs client, can see the following warning message.

CIFS: decode_ntlmssp_challenge: authentication has been weakened as server
does not support key exchange

To remove this warning message, Add support for key exchange feature to
ksmbd. This patch decrypts 16-byte ciphertext value sent by the client
using RC4 with session key. The decrypted value is the recovered secondary
key that will use instead of the session key for signing and sealing.

Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>
fs/Kconfig
fs/ksmbd/auth.c