2004-02-13  Ken Raeburn  <raeburn@mit.edu>

	* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac): New argument
	IVEC_MODE.  If clear, same old behavior.  If set, copy out next
	to last block for CTS.
	(krb5_dk_decrypt, krb5int_aes_dk_decrypt): Pass extra argument.
	* dk_encrypt.c (krb5int_aes_dk_encrypt): For IV, copy out next to
	last block for CTS.

2003-04-17  Ken Raeburn  <raeburn@mit.edu>

	* dk_encrypt.c (krb5int_aes_dk_encrypt): Set output length
	properly.

2003-04-13  Ken Raeburn  <raeburn@mit.edu>

	* dk_decrypt.c (krb5_dk_decrypt_maybe_trunc_hmac): Renamed from
	krb5_dk_decrypt, made static, added extra HMACSIZE argument to
	indicate size of HMAC.  Cast byte values to char to silence
	compiler warning.
	(krb5_dk_decrypt): Call it.
	(krb5int_aes_dk_decrypt): New function.
	* dk_encrypt.c (krb5_dk_encrypt): Cast byte values to char to
	silence compiler warning.
	(krb5int_aes_encrypt_length, trunc_hmac, krb5int_aes_dk_encrypt):
	New functions.
	* dk.h (krb5int_aes_encrypt_length, krb5int_aes_dk_encrypt,
	krb5int_aes_dk_decrypt): Declare.

2003-03-04  Ken Raeburn  <raeburn@mit.edu>

	* stringtokey.c (krb5int_dk_string_to_key): Renamed from
	krb5_... and added s2k-params argument.
	* dk.h: Updated.

2003-01-10  Ken Raeburn  <raeburn@mit.edu>

	* Makefile.in: Add AC_SUBST_FILE marker for libobj_frag.

2002-08-29  Ken Raeburn  <raeburn@mit.edu>

	* Makefile.in: Revert $(S)=>/ change, for Windows support.

2002-08-23  Ken Raeburn  <raeburn@mit.edu>

	* Makefile.in: Change $(S)=>/ and $(U)=>.. globally.

2001-10-09  Ken Raeburn  <raeburn@mit.edu>

	* dk.h: Make prototypes unconditional.

2001-06-21  Ken Raeburn  <raeburn@mit.edu>

	* derive.c: Include etypes.h.
	(krb5_derive_random, krb5_random2key): New functions.

	* checksum.c (krb5_dk_make_checksum): Cast 0x99 to char explicitly
	to silence warnings.

2001-04-10  Ken Raeburn  <raeburn@mit.edu>

	* checksum.c (krb5_dk_make_checksum): Add casts when mixing
	pointers with different target signedness.
	* dk_decrypt.c (krb5_dk_decrypt): Likewise.
	* stringtokey.c (krb5_dk_string_to_key): Likewise.

2001-03-05  Ken Raeburn  <raeburn@mit.edu>

	* checksum.c, derive.c, dk.h, dk_decrypt.c, dk_encrypt.c,
	stringtokey.c: Use const instead of krb5_const.

2001-01-23  Ken Raeburn  <raeburn@mit.edu>

	* stringtokey.c (kerberos): Now const.
	(krb5_dk_string_to_key): Cast it to non-const.

2000-06-03  Tom Yu  <tlyu@mit.edu>

	* dk_encrypt.c (krb5_dk_encrypt, krb5_marc_dk_encrypt): Chain
	ivecs.
	
	* dk_decrypt.c (krb5_dk_decrypt, krb5_marc_dk_decrypt): Chain
	ivecs.

2000-04-28  Ken Raeburn  <raeburn@mit.edu>

	* derive.c (krb5_derive_key): If memory allocation fails, release
	other allocated blocks before returning, instead of trying to
	release them after returning.

2000-01-21  Ken Raeburn  <raeburn@mit.edu>

	* checksum.c (krb5_dk_make_checksum): enc_providers are now
	const.  Modify if(a=b) assignment/test constructs to silence gcc
	warnings.
	* dk_decrypt.c (krb5_dk_decrypt, krb5_marc_dk_decrypt): Ditto.
	* dk_encrypt.c (krb5_dk_encrypt, krb5_marc_dk_encrypt): Ditto.
	* stringtokey.c (krb5_dk_string_to_key): Ditto.  Include dk.h.

1999-10-26  Wilfredo Sanchez  <tritan@mit.edu>

	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
	LOCAL_INCLUDES such that one can override CFLAGS from the command
	line without losing CPP search patchs and defines. Some associated
	Makefile cleanup.

1999-06-28  Tom Yu  <tlyu@mit.edu>

	* dk_encrypt.c (krb5_marc_dk_encrypt): Call
	krb5_marc_dk_encrypt_length() instead of krb5_dk_encrypt_length()
	to prevent blocksize errors.

Mon May 10 15:16:34 1999  Danilo Almeida  <dalmeida@mit.edu>

	* Makefile.in: Do win32 build in subdir.

Tue Jan  5 00:09:13 1999  Tom Yu  <tlyu@mit.edu>

	* dk.h: Add prototypes for krb5_marc_dk_*.

	* dk_encrypt.c (krb5_marc_dk_encrypt): Add compat for 32-bit
	length coded ciphertext.

	* dk_decrypt.c (krb5_marc_dk_decrypt): Add compat for 32-bit
	length coded ciphertext.

	* checksum.c: Add compat for 32-bit length included checksum.
	Note that nothing uses this at the moment, and probably
	shouldn't.

1998-11-13  Theodore Ts'o  <tytso@rsts-11.mit.edu>

	* Makefile.in: Set the myfulldir and mydir variables (which are
		relative to buildtop and thisconfigdir, respectively.)