dsdb/encrypted_secrets: remove dependency to libnettle and use our own aes_gcm_128_*()
authorStefan Metzmacher <metze@samba.org>
Thu, 22 Feb 2018 14:56:45 +0000 (15:56 +0100)
committerStefan Metzmacher <metze@samba.org>
Fri, 23 Feb 2018 11:47:25 +0000 (12:47 +0100)
commit07844a9a13506b4ca9181cfde05d9e4170208f88
treebdd52636401628436c430481c93d1be872a82a24
parentf9e2cb1369fa9636ff613a4e9c7387151409eafc
dsdb/encrypted_secrets: remove dependency to libnettle and use our own aes_gcm_128_*()

We already rely on gnutls in order to implement SSL/TLS, so using that
to speed up crypto like aes gcm 128 is fine, but as we already have
code for that algorithm, we should use that instead of adding a new
dependency to libnettle.

Some (I guess newer versions) of gnutls use nettle internally, so
we may end up using that code, but we should not have a direct dependency.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13276

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source4/dsdb/samdb/ldb_modules/encrypted_secrets.c
source4/dsdb/samdb/ldb_modules/tests/test_encrypted_secrets.c
source4/dsdb/samdb/ldb_modules/wscript
source4/dsdb/samdb/ldb_modules/wscript_build
source4/dsdb/samdb/ldb_modules/wscript_build_server