Hash full MAC even for VendorHashed and VendorKeyHashed.
authorLinus Nordberg <linus@nordu.net>
Tue, 5 Apr 2011 13:53:58 +0000 (15:53 +0200)
committerLinus Nordberg <linus@nordu.net>
Tue, 5 Apr 2011 13:53:58 +0000 (15:53 +0200)
commit6886c5f57ceb4db04c2e4e4a3d52da1d233698dc
tree869ad9d76d5972314170a97bfbfd8ef79e03086e
parent1c114bfcb18c98b12182dc9f1d1e6d8eb6127d94
Hash full MAC even for VendorHashed and VendorKeyHashed.

Comment on VendorKeyHashed, from source:
We are hashing the first nine octets too for easier correlation
between vendor-key-hashed and fully-key-hashed log records.  This
opens up for a known plaintext attack on the key but the consequences
of that is considered outweighed by the convenience gained.
fticks.c