|
 |
b6b438 |
From 146a33a845cd38089f0aed6953387123f59bc652 Mon Sep 17 00:00:00 2001
|
|
|
b6b438 |
From: Andreas Schneider <asn@samba.org>
|
|
|
b6b438 |
Date: Fri, 15 Mar 2019 16:25:28 +0100
|
|
|
b6b438 |
Subject: [PATCH 130/187] libcli:smb: Prefer AES-GCM over AES-CCM with GnuTLS
|
|
|
b6b438 |
|
|
|
b6b438 |
The AES-GCM implementation in GnuTLS is faster.
|
|
|
b6b438 |
|
|
|
b6b438 |
Signed-off-by: Andreas Schneider <asn@samba.org>
|
|
|
b6b438 |
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
|
|
|
b6b438 |
|
|
|
b6b438 |
Adapted to remove Samba AES support
|
|
|
b6b438 |
|
|
|
b6b438 |
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
|
|
|
b6b438 |
(cherry picked from commit 454ed53221b1374ad8148e922b64c3788ad4998e)
|
|
|
b6b438 |
---
|
|
|
b6b438 |
libcli/smb/smbXcli_base.c | 9 +++------
|
|
|
b6b438 |
1 file changed, 3 insertions(+), 6 deletions(-)
|
|
|
b6b438 |
|
|
|
b6b438 |
diff --git a/libcli/smb/smbXcli_base.c b/libcli/smb/smbXcli_base.c
|
|
|
b6b438 |
index d9837d48083..f0ba7803a53 100644
|
|
|
b6b438 |
--- a/libcli/smb/smbXcli_base.c
|
|
|
b6b438 |
+++ b/libcli/smb/smbXcli_base.c
|
|
|
b6b438 |
@@ -4788,12 +4788,9 @@ static struct tevent_req *smbXcli_negprot_smb2_subreq(struct smbXcli_negprot_sta
|
|
|
b6b438 |
}
|
|
|
b6b438 |
|
|
|
b6b438 |
SSVAL(p, 0, 2); /* ChiperCount */
|
|
|
b6b438 |
- /*
|
|
|
b6b438 |
- * For now we preferr CCM because our implementation
|
|
|
b6b438 |
- * is faster than GCM, see bug #11451.
|
|
|
b6b438 |
- */
|
|
|
b6b438 |
- SSVAL(p, 2, SMB2_ENCRYPTION_AES128_CCM);
|
|
|
b6b438 |
- SSVAL(p, 4, SMB2_ENCRYPTION_AES128_GCM);
|
|
|
b6b438 |
+
|
|
|
b6b438 |
+ SSVAL(p, 2, SMB2_ENCRYPTION_AES128_GCM);
|
|
|
b6b438 |
+ SSVAL(p, 4, SMB2_ENCRYPTION_AES128_CCM);
|
|
|
b6b438 |
|
|
|
b6b438 |
status = smb2_negotiate_context_add(
|
|
|
b6b438 |
state, &c, SMB2_ENCRYPTION_CAPABILITIES, p, 6);
|
|
|
b6b438 |
--
|
|
|
b6b438 |
2.23.0
|
|
|
b6b438 |
|