KRB5\_C\_MAKE\_CHECKSUM(3) Library Functions Manual KRB5\_C\_MAKE\_CHECKSUM(3)

# [NAME](#NAME)

`krb5_c_block_size`, `krb5_c_decrypt`, `krb5_c_encrypt`, `krb5_c_encrypt_length`, `krb5_c_enctype_compare`, `krb5_c_get_checksum`, `krb5_c_is_coll_proof_cksum`, `krb5_c_is_keyed_cksum`, `krb5_c_keylength`, `krb5_c_make_checksum`, `krb5_c_make_random_key`, `krb5_c_set_checksum`, `krb5_c_valid_cksumtype`, `krb5_c_valid_enctype`, `krb5_c_verify_checksum`, `krb5_c_checksum_length` — Kerberos 5 crypto API

# [LIBRARY](#LIBRARY)

Kerberos 5 Library (libkrb5, -lkrb5)

# [SYNOPSIS](#SYNOPSIS)

`#include <krb5.h>`

`krb5_error_code`  
`krb5_c_block_size`(`krb5_context context`, `krb5_enctype enctype`, `size_t *blocksize`);

`krb5_error_code`  
`krb5_c_decrypt`(`krb5_context context`, `const krb5_keyblock key`, `krb5_keyusage usage`, `const krb5_data *ivec`, `krb5_enc_data *input`, `krb5_data *output`);

`krb5_error_code`  
`krb5_c_encrypt`(`krb5_context context`, `const krb5_keyblock *key`, `krb5_keyusage usage`, `const krb5_data *ivec`, `const krb5_data *input`, `krb5_enc_data *output`);

`krb5_error_code`  
`krb5_c_encrypt_length`(`krb5_context context`, `krb5_enctype enctype`, `size_t inputlen`, `size_t *length`);

`krb5_error_code`  
`krb5_c_enctype_compare`(`krb5_context context`, `krb5_enctype e1`, `krb5_enctype e2`, `krb5_boolean *similar`);

`krb5_error_code`  
`krb5_c_make_random_key`(`krb5_context context`, `krb5_enctype enctype`, `krb5_keyblock *random_key`);

`krb5_error_code`  
`krb5_c_make_checksum`(`krb5_context context`, `krb5_cksumtype cksumtype`, `const krb5_keyblock *key`, `krb5_keyusage usage`, `const krb5_data *input`, `krb5_checksum *cksum`);

`krb5_error_code`  
`krb5_c_verify_checksum`(`krb5_context context`, `const krb5_keyblock *key`, `krb5_keyusage usage`, `const krb5_data *data`, `const krb5_checksum *cksum`, `krb5_boolean *valid`);

`krb5_error_code`  
`krb5_c_checksum_length`(`krb5_context context`, `krb5_cksumtype cksumtype`, `size_t *length`);

`krb5_error_code`  
`krb5_c_get_checksum`(`krb5_context context`, `const krb5_checksum *cksum`, `krb5_cksumtype *type`, `krb5_data **data`);

`krb5_error_code`  
`krb5_c_set_checksum`(`krb5_context context`, `krb5_checksum *cksum`, `krb5_cksumtype type`, `const krb5_data *data`);

`krb5_boolean`  
`krb5_c_valid_enctype`(`krb5_enctype`, `etype"`);

`krb5_boolean`  
`krb5_c_valid_cksumtype`(`krb5_cksumtype ctype`);

`krb5_boolean`  
`krb5_c_is_coll_proof_cksum`(`krb5_cksumtype ctype`);

`krb5_boolean`  
`krb5_c_is_keyed_cksum`(`krb5_cksumtype ctype`);

`krb5_error_code`  
`krb5_c_keylengths`(`krb5_context context`, `krb5_enctype enctype`, `size_t *inlength`, `size_t *keylength`);

# [DESCRIPTION](#DESCRIPTION)

The functions starting with krb5\_c are compat functions with MIT kerberos.

The `krb5_enc_data` structure holds and encrypted data. There are two public accessible members of `krb5_enc_data`. `enctype` that holds the encryption type of the data encrypted and `ciphertext` that is a `krb5_data` that might contain the encrypted data.

[`krb5_c_block_size`](#krb5_c_block_size)() returns the blocksize of the encryption type.

[`krb5_c_decrypt`](#krb5_c_decrypt)() decrypts `input` and store the data in `output.` If `ivec` is `NULL` the default initialization vector for that encryption type will be used.

[`krb5_c_encrypt`](#krb5_c_encrypt)() encrypts the plaintext in `input` and store the ciphertext in `output`.

[`krb5_c_encrypt_length`](#krb5_c_encrypt_length)() returns the length the encrypted data given the plaintext length.

[`krb5_c_enctype_compare`](#krb5_c_enctype_compare)() compares to encryption types and returns if they use compatible encryption key types.

[`krb5_c_make_checksum`](#krb5_c_make_checksum)() creates a checksum `cksum` with the checksum type `cksumtype` of the data in `data`. `key` and `usage` are used if the checksum is a keyed checksum type. Returns 0 or an error code.

[`krb5_c_verify_checksum`](#krb5_c_verify_checksum)() verifies the checksum of `data` in `cksum` that was created with `key` using the key usage `usage`. `verify` is set to non-zero if the checksum verifies correctly and zero if not. Returns 0 or an error code.

[`krb5_c_checksum_length`](#krb5_c_checksum_length)() returns the length of the checksum.

[`krb5_c_set_checksum`](#krb5_c_set_checksum)() sets the `krb5_checksum` structure given `type` and `data`. The content of `cksum` should be freeed with [`krb5_c_free_checksum_contents`](#krb5_c_free_checksum_contents)().

[`krb5_c_get_checksum`](#krb5_c_get_checksum)() retrieves the components of the `krb5_checksum`. structure. `data` should be free with [`krb5_free_data`](#krb5_free_data)(). If some either of `data` or `checksum` is not needed for the application, `NULL` can be passed in.

[`krb5_c_valid_enctype`](#krb5_c_valid_enctype)() returns true if `etype` is a valid encryption type.

[`krb5_c_valid_cksumtype`](#krb5_c_valid_cksumtype)() returns true if `ctype` is a valid checksum type.

[`krb5_c_is_keyed_cksum`](#krb5_c_is_keyed_cksum)() return true if `ctype` is a keyed checksum type.

[`krb5_c_is_coll_proof_cksum`](#krb5_c_is_coll_proof_cksum)() returns true if `ctype` is a collision proof checksum type.

[`krb5_c_keylengths`](#krb5_c_keylengths)() return the minimum length (`inlength`) bytes needed to create a key and the length (`keylength`) of the resulting key for the `enctype`.

# [SEE ALSO](#SEE_ALSO)

[krb5(3)](/man/os/heimdal/krb5.3), [krb5\_create\_checksum(3)](/man/os/heimdal/krb5_create_checksum.3), [krb5\_free\_data(3)](/man/os/heimdal/krb5_free_data.3), [kerberos(8)](/man/os/heimdal/kerberos.8)

November 17, 2006 HEIMDAL

---

Document: krb5_c_enctype_compare(3) from heimdal 7.8.0-r53 (Chainguard OS)
Source: https://github.com/heimdal/heimdal