shishi_kdc_check_nonce(3)

Usage

#include <shishi.h>

int shishi_kdc_check_nonce(Shishi * handle, Shishi_asn1 kdcreq, Shishi_asn1 enckdcreppart);

Arguments

`Shishi * handle`	Shishi handle as allocated by `shishi_init()`.
`Shishi_asn1 kdcreq`	Request of type KDC-REQ.
`Shishi_asn1 enckdcreppart`	Encrypted KDC-REP part.

Overview

Verifies that kdcreq.req-body.nonce and enckdcreppart.nonce contain matching values. This is one of the steps that has to be performed when processing an exchange of KDC-REQ and KDC-REP.

Return value

Returns SHISHI_OK if successful, SHISHI_NONCE_MISMATCH whenever the nonces are of differing lengths (usually a sign that a buggy server truncates the nonce to 4 bytes) and the same code if the nonce values differ, or an error code otherwise.

Releases

10 releases since Debian 4.0 (Etch); the text changed 5 times.