shishi_as_derive_salt(3)

📦
version 1.0.3 · 2 versions
  • 1.0.3 · debian bookworm, debian trixie, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking (latest)
  • 1.0.2 · ubuntu jammy
, in debian bookworm, debian trixie, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 shishi_as_derive_salt(3) 💖

okay bestie, welcome to the shishi manual — this one is shishi_as_derive_salt, an API function, and it's literally the girl who figures out your salt for you. no cap. 🧂✨

✨ SYNOPSIS ✨

#include <shishi.h>

int shishi_as_derive_salt(Shishi * handle, Shishi_asn1 asreq,
       Shishi_asn1 asrep, char ** salt, size_t * saltlen);

🫶 ARGUMENTS 🫶

  • Shishi * handle — the Shishi handle, allocated by shishi_init(). she's the main character, everything runs through her 💅
  • Shishi_asn1 asreq — Input AS-REQ variable. yes, that's an input, she's giving source material 🌸
  • Shishi_asn1 asrep — Input AS-REP variable. also an input, also iconic 🦋
  • char ** salt — Returned pointer to a newly allocated output array. brand new, freshly allocated, no reusing 🎀
  • size_t * saltlen — Pointer to integer, returning size of output array. she tells you how big the vibe is 📏

🌈 DESCRIPTION 🌈

so basically, this function computes the salt that should be used when deriving a key via shishi_string_to_key() for an AS exchange. it's giving key-derivation-prep energy, fr fr.

the way it works rn: it searches for PA-DATA of type SHISHI_PA_PW_SALT in the AS-REP provided by asrep, and if present, returns it. periodt. that's the first path.

otherwise — and this is the backup plan, lowkey the plot twist — the salt is composed from the client name and the realm, and both of those are extracted from the request asreq. so either the AS-REP hands you a salt, or you build one yourself from the request. obsessed with the flexibility honestly 💖

⭐ RETURN VALUE ⭐

Returns SHISHI_OK if successful. 🎉

failure conditions include various ASN.1 issues — like, if the ASN.1 is not ASN.1-ing, that's a fail. no guessing beyond that bestie, that's what the page says 💀

😭 REPORTING BUGS 😭

found a bug? don't be shy, report it to <bug-shishi@gnu.org>.

Copyright © 2002-2022 Simon Josefsson.

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. (so yes, you can share it, just keep the receipts 🧾✨)

🌸 SEE ALSO 🌸

The full documentation for shishi is maintained as a Texinfo manual. If the info and shishi programs are properly installed at your site, the command

info shishi

should give you access to the complete manual. iykyk 📖💜

not me writing a whole manual page just so you'd understand salt derivation... but also, you're welcome bestie 🫶

and that's the whole thing!! this page is from shishi 1.0.3, and it lives under the shishi manual — mwah, go slay your AS exchange 💅🎀💖

📦 where this page comes from